CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +55 more +57 moreu'Possibility of integer overflow in keymaster 4 while allocating memory due to multiplication of...7.8 High
- google androidIn Parse_wave of eas_mdls.c, there is a possible out of bounds write due to an integer overflow....7.5 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who...6.3 Medium
- the xorg project xorg-x11-server, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreA flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to...7.8 High
- the xorg project xorg-x11-server, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreA flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to...7.8 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.8 High
- the xorg project xorg-x11-server, x.org x server, canonical ubuntu linux +1 more +3 moreA flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension...7.8 High
- the x11 project libx11, fedoraproject fedora +1 moreAn integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows...7.8 High
- huawei p30 pro, p30 pro firmware +1 moreHUAWEI P30 Pro smartphone with Versions earlier than 10.1.0.160(C00E160R2P8) has an integer...5.5 Medium
- readytalk avian** UNSUPPORTED WHEN ASSIGNED ** An issue was discovered in ReadyTalk Avian 1.2.0. The vm:...7.8 High
- horndis project horndisInteger overflow in HoRNDIS5.5 Medium
- the x11 project libx11, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreAn integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM)...6.7 Medium
- google androidIn NewFixedDoubleArray of factory.cc, there is a possible out of bounds write due to an integer...8.8 High
- zohocorp manageengine desktop centralAn issue was discovered in the client side of Zoho ManageEngine Desktop Central before 10.0.533....9.8 Critical
- debian linux, gnu grub2, canonical ubuntu linux +13 more +15 moreGRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.5.7 Medium
- gnu grub2, canonical ubuntu linux, opensuse leap +4 more +6 moreThere is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A...5.7 Medium
- gnu grub2, canonical ubuntu linux, opensuse leap +4 more +6 moreThere is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a...5.7 Medium
- gnu grub2, open source grub, opensuse leap +2 moreThere's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems...6.7 Medium
- gnu grub2, open source grub, opensuse leap +2 moreIn grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic...6.4 Medium
- netgear r6700, r6700 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreInteger Overflow in FreeRDP3.5 Low
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreOut of bounds write in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to...8.8 High
- node.bcrypt.js project node.bcrypt.jsInsecure Encryption5.9 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +62 more +64 moreInteger overflow in diag command handler when user inputs a large value for number of tasks field...7.8 High
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB read in `TrioParse` in FreeRDP3.5 Low
- arm mbed-coapMemory leaks were discovered in the CoAP library in Arm Mbed OS 5.15.3 when using the Arm mbed...7.5 High
- libvncserver project libvncserver, debian linux, opensuse leap +6 more +8 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/scale.c has a pixel_value...6.5 Medium
- treck tcp\/ipThe Treck TCP/IP stack before 6.0.1.66 has an Integer Overflow during Memory Allocation that...7.3 High
- redislabs redis, debian linux, oracle communications operations monitor +1 more +3 moreAn integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context...7.7 High
- libemf project libemf, fedoraproject fedora +1 moreScaleViewPortExtEx in libemf.cpp in libEMF (aka ECMA-234 Metafile Library) 1.0.12 allows an...5.5 Medium
- intel server platform services, converged security management engine firmware, trusted execution engine +2 moreInteger overflow in subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77 and...4.4 Medium
- pcre, apple macos, gitlab +12 more +14 morelibpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.5.3 Medium
- google androidIn phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due...7.8 High
- google androidIn NDEF_MsgValidate of ndef_utils.c, there is a possible out of bounds read due to an integer...4.4 Medium
- google androidIn multiple locations of Parcel.cpp, there is a possible out-of-bounds write due to an integer...7.8 High
- google androidIn ihevcd_parse_slice_header of ihevcd_parse_slice_header.c, there is a possible out of bounds...8.8 High
- google androidIn load of ResourceTypes.cpp, there is a possible out of bounds read due to an integer overflow....5.5 Medium
- google androidIn addPacket of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer...7.5 High
- google androidIn aes_cmac of aes_cmac.cc, there is a possible out of bounds write due to an integer overflow....9.8 Critical
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +19 more +21 moreA remote code execution vulnerability exists when Microsoft Windows OLE fails to properly...8.8 High
- apple ios, ipados, macos +4 more +6 moreAn integer overflow was addressed through improved input validation. This issue is fixed in iOS...7.8 High
- apple macos, mac os x +1 moreAn integer overflow was addressed through improved input validation. This issue is fixed in macOS...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel through 5.7.1. drivers/tty/vt/keyboard.c has an...7.8 High
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer...7.5 High
- zephyrproject zephyrMQTT buffer overflow on receive buffer9.0 Critical
- zephyrproject zephyrRemote Denial of Service in CoAP Option Parsing Due To Integer Overflow6.8 Medium
- indutny ellipticSignature Malleabillity in elliptic7.7 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +36 more +38 moreInteger overflow may occur if atom size is less than atom offset as there is improper validation...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, mdm9205 firmware +12 more +14 moreInteger overflow in calculating estimated output buffer size when getting a list of installed...7.8 High
- upxp_lx_elf.cpp in UPX before 3.96 has an integer overflow during unpacking via crafted values in a...5.5 Medium
- Show moreLoading…