CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8098 firmware, mdm9607 firmware +16 more +18 morePossible integer overflow while checking the length of frame which is a 32 bit integer and is...9.8 Critical
- jasper project jasperInteger overflow in the jas_matrix_create function in JasPer allows context-dependent attackers...8.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInteger overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87...8.8 High
- qualcomm, inc. snapdragon industrial iot, qualcomm mdm9206 firmware, mdm9607 firmware +2 moreSubsequent additions performed during Module loading while allocating the memory would lead to...7.8 High
- google android, fedoraproject fedora, libexif project libexif +2 moreIn exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an...7.5 High
- cisco ios xr software, fxos, ios xr +3 more +5 moreCisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability7.4 High
- minisnmpd project minisnmpdAn exploitable out of bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses...8.2 High
- tianocore edk2, american megatrends incorporated (ami) bios, phoenix technologies ltd. sct3 +2 moreInteger overflow in the Drive Execution Environment (DXE) phase in the Capsule Update feature in...6.8 Medium
- tianocore edk2, american megatrends incorporated (ami) bios, phoenix technologies ltd. sct3 +2 moreMultiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update...6.8 Medium
- irfanview flashpix pluginIrfanView FlashPix Plugin 4.3.4 0 has an Integer Overflow Vulnerability9.6 Critical
- xnviewXnView 2.03 has an integer overflow vulnerability9.8 Critical
- google androidmedia/libmedia/IAudioPolicyService.cpp in Android before 5.1 allows attackers to execute...7.8 High
- artifex mupdf, sumatrapdfreader sumatrapdf +1 moreSumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number...7.8 High
- huawei dbs3900 tdd lte firmware, dp300 firmware, rp200 firmware +4 more +6 moreThere is an integer overflow vulnerability in LDAP server of some Huawei products. Due to...7.5 High
- huawei dbs3900 tdd lte firmware, dp300 firmware, rp200 firmware +4 more +6 moreThere is an integer overflow vulnerability in LDAP client of some Huawei products. Due to...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +39 more +41 moreInteger overflow occurs while playing the clip which is nonstandard in Snapdragon Auto,...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +25 more +27 morePossible integer overflow happens when mmap find function will increment refcount every time when...7.8 High
- debian linux, python pillow, canonical ubuntu linux +1 more +3 moreUncontrolled Resource Consumption in Pillow7.5 High
- python pillow, canonical ubuntu linux, fedoraproject fedora +2 moreInteger overflow in Pillow8.8 High
- saitoha libsixellibsixel 1.8.4 has an integer overflow in sixel_frame_resize in frame.c.8.8 High
- debian linux, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), tianocore edk2 +2 moreInteger truncation in EDK II may allow an authenticated user to potentially enable escalation of...7.8 High
- ros ros-commAn issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic...9.8 Critical
- mz-automation libiec61850In libIEC61850 1.4.0, MmsValue_newOctetString in mms/iso_mms/common/mms_value.c has an integer...6.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +18 more +20 moreInteger overflow to buffer overflow due to lack of validation of event arguments received from...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8016 firmware +46 more +48 moreDevice memory may get corrupted because of buffer overflow/underflow. in Snapdragon Auto,...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +41 more +43 moreImproper check in video driver while processing data from video firmware can lead to integer...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9607 firmware, nicobar firmware +13 more +15 moreImproper validation of event buffer extracted from FW response can lead to integer overflow,...7.8 High
- intel cd1iv128mk firmware, cd1m3128mk firmware, cd1p64gk firmware +16 more +18 moreInteger overflow in firmware for Intel(R) NUC(R) may allow a privileged user to potentially...6.7 Medium
- siemens sppa-t3000 ms3000 migration serverA vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An...7.5 High
- siemens sppa-t3000 ms3000 migration serverA vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An...7.5 High
- siemens sppa-t3000 ms3000 migration serverA vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An...7.5 High
- siemens sppa-t3000 ms3000 migration serverA vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An...7.5 High
- siemens sppa-t3000 ms3000 migration serverA vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An...7.5 High
- siemens sppa-t3000 ms3000 migration serverA vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An...7.5 High
- siemens sppa-t3000 ms3000 migration serverA vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An...7.5 High
- siemens sppa-t3000 ms3000 migration serverA vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +37 more +39 morePossible integer overflow while multiplying two integers of 32 bit in QDCM API of get display...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 moreLack of check of data truncation on user supplied data in kernel leads to buffer overflow in...7.8 High
- fig2dev project fig2dev, fedoraproject fedora +1 moremake_arrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write...5.5 Medium
- leadtoolsAn exploitable code execution vulnerability exists in the DICOM packet-parsing functionality of...9.8 Critical
- leadtoolsAn exploitable code execution vulnerability exists in the DICOM network response functionality of...8.1 High
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreInteger overflow in PDFium in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...8.8 High
- saitoha libsixelAn issue was discovered in libsixel 1.8.2. There is an integer overflow in the function...9.8 Critical
- saitoha libsixelAn issue was discovered in libsixel 1.8.2. There is an integer overflow in the function...9.8 Critical
- saitoha libsixelAn issue was discovered in libsixel 1.8.2. There is a heap-based buffer overflow in the function...9.8 Critical
- openssl, canonical ubuntu linux, debian linux +6 more +8 morersaz_512_sqr overflow bug on x86_645.3 Medium
- radare radare2In radare2 through 4.0, there is an integer overflow for the variable new_token_size in the...7.8 High
- rabbitmq-c project rabbitmq-c, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is...9.8 Critical
- cesanta mongooseAn integer overflow in parse_mqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to...9.8 Critical
- Show moreLoading…