CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- gorillatoolkit websocket, debian linux +1 moreInteger overflow in github.com/gorilla/websocket7.5 High
- contiki-ngAn issue was discovered in Contiki through 3.0. An Integer Overflow exists in the uIP TCP/IP...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w, apq8017 +284 more +286 moreMemory corruption while calculating L2CAP packet length in reassembly logic when remote sends...9.8 Critical
- google androidIn SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder.cpp, there is a...7.8 High
- advsys pngoutAn issue was discovered in PNGOUT 2020-01-15. When compressing a crafted PNG file, it encounters...5.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 more$mod can result in undefined behavior6.5 Medium
- cimg, fedoraproject fedora +1 moreA flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer...8.1 High
- garmin forerunner 235 firmwareGarmin Forerunner 235 before 8.20 is affected by: Integer Overflow. The component is: ConnectIQ...9.9 Critical
- intel active management technology firmware, netapp cloud backup +1 moreInteger overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0...6.5 Medium
- intel active management technology firmware, netapp cloud backup +1 moreInteger overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon mobile, qualcomm qsm8350 firmware, sa6145p firmware +12 more +14 moreu'Possible integer overflow to heap overflow while processing command due to lack of check of...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +90 more +92 moreu'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon industrial iot, snapdragon mobile, qualcomm qcm4290 firmware, qcs4290 firmware +27 more +29 moreu'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8053 firmware +12 more +14 moreu'Possible buffer overflow in WMA message processing due to integer overflow occurs when...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm mdm9205 firmware, qcm4290 firmware +51 more +53 moreu'Integer overflow can cause a buffer overflow due to lack of table length check in the...7.8 High
- readytalk avian** UNSUPPORTED WHEN ASSIGNED ** An issue was discovered in ReadyTalk Avian 1.2.0 before 2020-10...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +9 more +11 moreu'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check'...9.1 Critical
- google android, fedoraproject fedora +1 moreIn exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an...9.8 Critical
- google androidIn create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow....7.8 High
- microchip advanced software framework 4Atmel Advanced Software Framework (ASF) 4 has an Integer Overflow.9.1 Critical
- apple icloud, icloud for windows, ios +9 more +11 moreAn integer overflow was addressed through improved input validation. This issue is fixed in iOS...7.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInteger overflow in media in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInteger overflow in SwiftShader in Google Chrome prior to 86.0.4240.75 allowed a remote attacker...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInteger overflow in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...8.8 High
- libass project libassIn libass 0.14.0, the `ass_outline_construct`'s call to `outline_stroke` causes a signed integer...8.8 High
- openrobotics ros comm ros communications packages, ros ros-comm +1 moreInteger overflow in ROS communications library7.3 High
- mikrotik routerosAn integer underflow in the SMB server of MikroTik RouterOS before 6.45.5 allows remote...7.5 High
- zohocorp manageengine desktop centralAn issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534. An...7.2 High
- google androidIn remove of String16.cpp, there is a possible out of bounds write due to an integer overflow....7.8 High
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +1 more +3 moreAn integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc`...3.3 Low
- ygopro ygocoreAn integer overflow was discovered in YGOPro ygocore v13.51. Attackers can use it to leak the...7.5 High
- debian linux, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), tianocore edk2 +2 moreInteger overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to...5.5 Medium
- google androidIn the Bluetooth server, there is a possible out of bounds write due to an integer overflow. This...6.7 Medium
- google androidIn the camera, there is a possible out of bounds read due to an integer overflow. This could lead...4.4 Medium
- google androidIn Mediaserver, there is a possible out of bounds write due to an integer overflow. This could...7.8 High
- google androidIn libstagefright, there is a possible out of bounds write due to an integer overflow. This could...8.8 High
- google androidIn libavb, there is a possible out of bounds write due to an integer overflow. This could lead to...7.8 High
- google android, opensuse leap +1 moreIn skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer...7.8 High
- gonitro nitro pro, nitro pro +1 moreAn exploitable vulnerability exists in the object stream parsing functionality of Nitro Software,...8.8 High
- gonitro nitro pro, nitro pro +1 moreAn arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software...8.8 High
- vmware horizon client, workstation player, workstation pro +2 moreVMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an...6.5 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received...4.3 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +59 more +61 moreu'A potential buffer overflow exists due to integer overflow when parsing handler options due to...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +61 more +63 moreu'Lack of check of integer overflow while doing a round up operation for data read from shared...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +68 more +70 moreu'Heap overflow in diag command handler due to lack of check of packet length received from user'...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, mdm9150 firmware +27 more +29 moreu'Possible integer overflow in API due to lack of check on large oid range count in cert...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +62 more +64 moreu'Lack of check for integer overflow for round up and addition operations result into memory...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +63 more +65 moreu'Lack of check that the TX FIFO write and read indices that are read from shared RAM are less...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +63 more +65 moreu'Lack of integer overflow check for addition of fragment size and remaining size that are read...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +63 more +65 moreu'Lack of check that the current received data fragment size of a particular packet that are read...7.8 High
- Show moreLoading…