CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- hardlink, debian linux, redhat enterprise linux +2 moreHardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows...8.8 High
- linux kernelThe Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in...7.8 High
- xcftools project xcftools, debian linux +1 moreAn exploitable integer overflow vulnerability exists in the flattenIncrementally function in the...8.8 High
- xcftools project xcftools, debian linux +1 moreAn exploitable integer overflow vulnerability exists in the flattenIncrementally function in the...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +28 more +30 moreBuffer overflow can occur while processing non-standard NAN message from user space. in...7.8 High
- qualcomm ips, qualcomm, inc. postscript and pdf printers that use ips versions prior to 2019.2, hp 2dr21d firmware +40 more +42 moreInteger overflow to buffer overflow vulnerability in PostScript image handling code used by the...9.8 Critical
- oniguruma project oniguruma, debian linux, fedoraproject fedora +1 more +3 moreAn integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9...9.8 Critical
- hyper httpInteger Overflow/Infinite Loop in the http crate7.5 High
- freedesktop poppler, debian linux +1 moreAn integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts.6.5 Medium
- huawei p30, p30 firmware +1 moreP30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an integer...7.8 High
- huawei p30, p30 firmware +1 moreP30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an integer...7.8 High
- linux kernel, broadcom fabric operating system, netapp active iq unified manager +14 more +16 moreAn issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is...9.8 Critical
- leadtoolsAn exploitable integer overflow vulnerability exists in the BMP header parsing functionality of...8.8 High
- leadtoolsAn exploitable integer underflow vulnerability exists in the CMP-parsing functionality of...8.8 High
- google blinkAn Integer Overflow exists in WebKit in Google Chrome before Blink M11 in the macOS WebCore:...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +44 more +46 morePossible Integer overflow because of subtracting two integers without checking if the result...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +28 more +30 moreWhile processing vendor command which contains corrupted channel count, an integer overflow...9.8 Critical
- investintech able2extract, investintech inc. able2extract professional +1 moreAn exploitable memory corruption vulnerability exists in Investintech Able2Extract Professional 4...8.8 High
- mbedAn integer overflow was discovered in the CoAP library in Arm Mbed OS 5.14.0. The function...9.8 Critical
- canonical whoopsie, ubuntu linux +1 moreInteger overflow in bson_ensure_space6.3 Medium
- gnu gccInteger overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified...7.8 High
- chacha20 project chacha20Counter overflow in chacha207.5 High
- libssh2, debian linux, fedoraproject fedora +10 more +12 moreIn libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer...8.1 High
- libtiff, osgeo gdal +1 moretif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has...8.8 High
- gnu binutils, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...6.5 Medium
- openbsd openssh, netapp cloud backup, steelstore cloud integrated storage +5 more +7 moreOpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a...7.8 High
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +2 moreCisco Adaptive Security Appliance Software Secure Copy Denial of Service Vulnerability6.8 Medium
- google chrome osThe Imagination Technologies driver for Chrome OS before R74-11895.B, R75 before R75-12105.B, and...7.8 High
- tcpdumplibpcap before 1.9.1, as used in tcpdump before 4.9.3, has a buffer overflow and/or over-read...7.8 High
- facebook whatsapp for android, whatsapp for ios, whatsapp +2 moreAn integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an...7.8 High
- google androidIn libandroidfw, there is a possible OOB read due to an integer overflow. This could lead to...5.0 Medium
- google androidIn libhevc, there is a possible out of bounds read due to an integer overflow. This could lead to...6.5 Medium
- google androidIn libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead...8.8 High
- google androidIn libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead...8.8 High
- google androidIn Bluetooth, there is a possible crash due to an integer overflow. This could lead to remote...7.5 High
- google androidIn libFDK, there is a possible out of bounds write due to an integer overflow. This could lead to...8.8 High
- google androidIn libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead...8.8 High
- google androidIn libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead...8.8 High
- google androidIn libMpegTPDec, there is a possible out of bounds write due to an integer overflow. This could...8.8 High
- google androidIn libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead...8.8 High
- google androidIn libMpegTPDec, there is a possible out of bounds write due to an integer overflow. This could...8.8 High
- google androidIn libFDK, there is a possible out of bounds write due to an integer overflow. This could lead to...8.8 High
- google androidIn libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead...8.8 High
- google androidIn libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead...9.8 Critical
- google androidIn libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead...8.8 High
- google androidIn libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead...8.8 High
- google androidIn libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead...8.8 High
- google androidIn libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead...8.8 High
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn libexif, there is a possible out of bounds write due to an integer overflow. This could lead...8.8 High
- google androidIn MPEG4Extractor, there is a possible out of bounds write due to an integer overflow. This could...8.8 High
- Show moreLoading…