CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- perl, fedoraproject fedora, netapp oncommand workflow automation +17 more +19 moreCVE-2020-10878 does not affect BellSoft software8.6 High
- perl, fedoraproject fedora, opensuse leap +15 more +17 moreCVE-2020-10543 does not affect BellSoft software8.2 High
- freerdp, debian linux, opensuse leap +2 moreInteger Overflow in FreeRDP8.0 High
- freerdp, debian linux, opensuse leap +2 moreInteger Overflow to Buffer Overflow in FreeRDP6.9 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreIn QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation....3.8 Low
- sqlite, apple icloud, ipados +15 more +17 moreSQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.5.5 Medium
- phpTemporary files are not cleaned after OOM when parsing HTTP request data5.3 Medium
- gonitro nitro pro, nitro pro +1 moreAn exploitable code execution vulnerability exists in the way Nitro Pro 13.9.1.155 parses Pattern...8.8 High
- [unknown] dpdk, dpdk data plane development kit, fedoraproject fedora +2 more +4 moreA vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct...6.0 Medium
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +1 more +3 moreA vulnerability was found in DPDK versions 18.11 and above. The vhost-crypto library code is...5.1 Medium
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +4 more +6 moreA memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an...5.1 Medium
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +4 more +6 moreA vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer...5.1 Medium
- vandyke securecrtSecureCRT before 8.7.2 allows remote attackers to execute arbitrary code via an Integer Overflow...9.8 Critical
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreModerate: freerdp and vinagre security, bug fix, and enhancement update2.2 Low
- freerdp, canonical ubuntu linux, debian linux +1 more +3 morefreerdp - security update6.6 Medium
- freerdp, canonical ubuntu linux, debian linux +1 more +3 morefreerdp - security update6.6 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreA signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID...5.3 Medium
- zephyrproject zephyrInteger Overflow In is_in_region Allows User Thread To Access Kernel Memory7.5 High
- enlightenment imlib2modules/loaders/loader_ico.c in imlib2 1.6.0 has an integer overflow (with resultant invalid...9.1 Critical
- json-c, canonical ubuntu linux, debian linux +17 more +19 morejson-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as...7.8 High
- accusoft imagegearAn exploitable code execution vulnerability exists in the TIFF fillinraster function of the...9.8 Critical
- qemuAn integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA...3.3 Low
- mongodb c driver, whoopsie project whoopsie +1 morebson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and...5.5 Medium
- ntop ndpiIn nDPI through 3.2 Stable, the SSH protocol dissector has multiple KEXINIT integer overflows...9.8 Critical
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 5.0.2. A remote attacker can replay a sniffed Digest...9.8 Critical
- contiki-ng, contiki-os contiki +1 moreAn issue was discovered in Contiki-NG through 4.2 and Contiki through 3.0. A buffer overflow is...7.5 High
- teeworlds, opensuse leap +1 moreTeeworlds before 0.7.4 has an integer overflow when computing a tilemap size.9.8 Critical
- google androidIn crus_afe_get_param of msm-cirrus-playback.c, there is a possible out of bounds read due to an...4.4 Medium
- autodesk fbx software development kitAn intager overflow vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to...6.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +34 more +36 morePossible integer overflow to buffer overflow in WLAN while parsing nonstandard NAN IE messages....7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +49 more +51 moreBuffer overflow in WLAN firmware while parsing GTK IE containing GTK key having length more than...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +50 more +52 moreBuffer overflow can occur in In WLAN firmware while unwraping data using CCMP cipher suite during...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm apq8096au firmware, msm8996au firmware +10 more +12 moreWhile handling the vendor command there is an integer truncation issue that could yield a buffer...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm qcn7605 firmware, qcs605 firmware +10 more +12 morePossible integer overflow can happen in host driver while processing user controlled string due...7.1 High
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....8.2 High
- openexr, apple icloud, ipados +8 more +10 moreAn issue was discovered in OpenEXR before 2.4.1. Because of integer overflows in...5.5 Medium
- facebook instagram, instagram for android +1 moreA large heap overflow could occur in Instagram for Android when attempting to upload an image...7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset.7.5 High
- google androidAn issue was discovered on Samsung mobile devices with M(6.0), N(7.x) and O(8.x) except...9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with N(7.x) (MT6755/MT6757 Mediatek models)...9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. There is an...7.5 High
- videolabs libmicrodns, debian linux +1 moreAn exploitable denial-of-service vulnerability exists in the TXT record-parsing functionality of...7.5 High
- google androidAn issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos...9.8 Critical
- graphicsmagick, debian linux, opensuse backports +1 more +3 moreGraphicsMagick before 1.3.35 has an integer overflow and resultant heap-based buffer overflow in...9.8 Critical
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...7.5 High
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 morelibvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and...9.8 Critical
- google androidIn readCString of Parcel.cpp, there is a possible out of bounds write due to an integer overflow....9.8 Critical
- kyocera ecosys m5526cdw firmwareSome Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by an integer...8.8 High
- icu-project international components for unicode, canonical ubuntu linux, debian linux +11 more +13 moreAn issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An...8.8 High
- moxa mb3170 firmware, mb3180 firmware, mb3270 firmware +3 more +5 moreAn issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480...7.5 High
- Show moreLoading…