CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- issuer project issuerAn integer overflow has been found in the the latest version of Issuer. The total issuedCount can...7.5 High
- genivia gsoap, fedoraproject fedora +1 moreA code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP...9.8 Critical
- godotengine godot engineAn integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading...7.8 High
- cryptography.io cryptography, fedoraproject fedora, oracle communications cloud native core network function cloud native environment +2 morePyCA Cryptography symmetrically encrypting large values can lead to integer overflow9.1 Critical
- softmaker planmaker 2021An exploitable integer overflow vulnerability exists in the PlanMaker document parsing...8.8 High
- windriver vxworks, oracle communications eagle +1 moreinteger overflow in calloc7.3 High
- google androidIn ged, there is a possible out of bounds write due to an integer overflow. This could lead to...6.7 Medium
- google androidIn kisd, there is a possible out of bounds write due to an integer overflow. This could lead to...6.7 Medium
- videolan vlc media playerA buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media...7.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009, apq8009w +367 more +369 moreBuffer over read can happen in video driver when playing clip with atomsize having value...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009, apq8009w +368 more +370 morePossible integer overflow can occur when stream info update is called when total number of...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +489 more +491 moreInteger multiplication overflow resulting in lower buffer size allocation than expected causes...9.8 Critical
- libsdl simple directmedia layer, debian linux, fedoraproject fedora +1 more +3 moreSDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy...7.8 High
- imagemagick, fedoraproject fedora, redhat enterprise linux desktop +2 moreIn ImageMagick versions before 7.0.9-0, there are outside the range of representable values of...3.3 Low
- imagemagick, debian linux +1 moreIn ImageMagick, there is an outside the range of representable values of type 'unsigned int' at...3.3 Low
- nvidia virtual gpu managerNVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input index is not...7.8 High
- google androidIn WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer...6.5 Medium
- libtiff, debian linux, netapp ontap select deploy administration utility +1 more +3 moreAn integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw...7.8 High
- wavpack, debian linux, fedoraproject fedora +2 moreWavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an...6.1 Medium
- p11-kit project p11-kit, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreModerate: p11-kit security, bug fix, and enhancement update7.5 High
- google androidIn NFA_RwI93WriteMultipleBlocks of nfa_rw_api.cc, there is a possible out of bounds write due to...7.8 High
- google androidIn decode_Huffman of JBig2_SddProc.cpp, there is a possible out of bounds write due to an integer...5.5 Medium
- gnome glib** DISPUTED ** GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of...7.8 High
- altran picotcpAn issue was discovered in picoTCP 1.7.0. The routine for processing the next header field (and...7.5 High
- altran picotcpAn issue was discovered in picoTCP 1.7.0. The code for creating an ICMPv6 echo replies doesn't...7.5 High
- altran picotcpAn issue was discovered in picoTCP 1.7.0. The code for parsing the hop-by-hop IPv6 extension...7.5 High
- contiki-os contikiAn issue was discovered in Contiki through 3.0. A memory corruption vulnerability exists in the...7.5 High
- canonical apt, debian advanced package tool, netapp solidfire baseboard management controller firmware +2 moreapt integer wraparound5.7 Medium
- apple icloud, ipados, itunes +5 more +7 moreAn integer overflow was addressed through improved input validation. This issue is fixed in macOS...7.8 High
- apple macosMultiple integer overflows were addressed with improved input validation. This issue is fixed in...8.8 High
- imagemagick, debian linux +1 moreA flaw was found in ImageMagick in coders/txt.c. An attacker who submits a crafted file that is...3.3 Low
- imagemagick, debian linux +1 moreA floating point math calculation in ScaleAnyToQuantum() of /MagickCore/quantum-private.h could...3.3 Low
- imagemagick, debian linux +1 moreIn IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which...3.3 Low
- imagemagick, debian linux +1 moreA flaw was found in ImageMagick in MagickCore/quantum-export.c. An attacker who submits a crafted...3.3 Low
- imagemagick, debian linux +1 moreIn CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and...5.5 Medium
- imagemagick, debian linux +1 moreIn the CropImage() and CropImageToTiles() routines of MagickCore/transform.c, rounding...3.3 Low
- imagemagick, debian linux +1 moreThere are 4 places in HistogramCompare() in MagickCore/histogram.c where an integer overflow is...3.3 Low
- google chromeInsufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote...6.5 Medium
- imagemagick, redhat enterprise linux +1 moreA flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file...3.3 Low
- imagemagick, debian linux, redhat enterprise linux +2 moreA flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file...3.3 Low
- imagemagick, debian linux, redhat enterprise linux +2 moreA flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file...3.3 Low
- imagemagick, debian linux, redhat enterprise linux +2 moreA flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is...3.3 Low
- imagemagick, debian linux, redhat enterprise linux +2 moreIn RestoreMSCWarning() of /coders/pdf.c there are several areas where calls to GetPixelIndex()...3.3 Low
- imagemagick, debian linux +1 moreDue to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow...5.5 Medium
- imagemagick, debian linux, redhat enterprise linux +2 moreA flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file...3.3 Low
- imagemagick, debian linux +1 moreA flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file...7.8 High
- imagemagick, debian linux +1 moreIn /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator() where a size_t...3.3 Low
- imagemagick, debian linux +1 moreA flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is...5.5 Medium
- imagemagick, debian linux +1 moreWritePALMImage() in /coders/palm.c used size_t casts in several areas of a calculation which...3.3 Low
- imagemagick, debian linux +1 moreIn IntensityCompare() of /MagickCore/quantize.c, a double value was being casted to int and...3.3 Low
- Show moreLoading…