CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- isc bind, debian linux, isc bind9 +12 more +14 moreA second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack8.1 High
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in the regional allocator via regional_alloc.9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro.9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in sldns_str2wire_dname_buf_origin, leading to an...9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c.9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c.9.8 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreInteger overflow in Mojo in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had...9.6 Critical
- amazon freertosThe kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in stream_buffer...9.8 Critical
- amazon freertosThe kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in queue.c for...9.8 Critical
- imagemagick, debian linux +1 moreA flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in...7.5 High
- mozilla firefox, firefox esr, thunderbird +2 morePorts that were written as an integer overflow above the bounds of a 16-bit integer could have...8.8 High
- gpacThere is a integer overflow in media_tools/av_parsers.c in the gf_avc_read_pps_bs_internal in...5.5 Medium
- gpacThere is a integer overflow in media_tools/av_parsers.c in the hevc_parse_slice_segment function...5.5 Medium
- gpacThere is a integer overflow in function filter_core/filter_props.c:gf_props_assign_value in GPAC...7.8 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- uclouvain openjpeg, debian linux, fedoraproject fedora +2 moreInteger Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a...5.5 Medium
- rust-lang rust, fedoraproject fedora +1 moreIn the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +200 more +202 moreUnintended reads and writes by NS EL2 in access control driver due to lack of check of input...8.4 High
- htmldoc project htmldoc, debian linux +1 moreInteger overflow in the htmldoc 1.9.11 and before may allow attackers to execute arbitrary code...9.8 Critical
- apple macos, mac os x +1 moreAn integer overflow was addressed with improved input validation. This issue is fixed in macOS...7.8 High
- google androidIn decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to an integer...5.5 Medium
- google androidIn CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds read due to...5.5 Medium
- academysoftwarefoundation openexr, debian linux +1 moreThere's a flaw in OpenEXR's deep tile sample size calculations in versions before 3.0.0-beta. An...5.5 Medium
- academysoftwarefoundation openexr, debian linux +1 moreA flaw was found in OpenEXR's B44 uncompression functionality in versions before 3.0.0-beta. An...5.3 Medium
- academysoftwarefoundation openexr, debian linux +1 moreThere is a flaw in OpenEXR in versions before 3.0.0-beta. An attacker who can submit a crafted...5.3 Medium
- academysoftwarefoundation openexr, debian linux +1 moreThere's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed...5.3 Medium
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.8 High
- genivia gsoap, oracle communications diameter signaling router, communications eagle application processor +3 more +5 moreA code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP...9.8 Critical
- linux kernelA flaw was found in the Linux kernel. A denial of service problem is identified if an extent tree...5.5 Medium
- netgear gs116e firmware, jgs516pe firmware +1 moreMultiple integer overflow parameters were found in the web administration panel on NETGEAR...6.8 Medium
- google androidIn the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer...4.4 Medium
- google androidIn the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer...4.4 Medium
- facebook hhvmDue to incorrect string size calculations inside the preg_quote function, a large input string...9.8 Critical
- expressvpnAn integer buffer overflow in the Nginx webserver of ExpressVPN Router version 1 allows remote...7.5 High
- linux kernelAn out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code...7.8 High
- newlib project newlib, fedoraproject fedora +1 moreA flaw was found in newlib in versions prior to 4.0.0. Improper overflow validation in the memory...9.8 Critical
- google androidIn Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out of bounds write due...7.8 High
- redisInteger overflow on 32-bit systems5.4 Medium
- cacalabs libcaca, debian linux, fedoraproject fedora +2 moreA flaw was found in libcaca v0.99.beta19. A buffer overflow issue in caca_resize function in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +535 more +537 morePossible memory corruption while processing EAPOL frames due to lack of validation of key length...8.8 High
- png-img project png-imgInteger Overflow in png-img8.8 High
- qemu, debian linux, fedoraproject fedora +2 moreAn integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5...3.2 Low
- intel graphics driversInteger overflow in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a...7.8 High
- intel graphics driversInteger overflow in some Intel(R) Graphics Drivers before version 26.20.100.8476 may allow a...7.8 High
- intel graphics driversInteger overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version...7.8 High
- openssl, apple ipados, iphone os +20 more +22 moreNull pointer deref in X509_issuer_and_serial_hash()5.9 Medium
- openssl, debian linux, fujitsu m10-1 firmware +18 more +20 moreInteger overflow in CipherUpdate7.5 High
- autotrace project autotrace, fedoraproject fedora +1 moreA biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to...3.3 Low
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Reader DC Integer Overflow Vulnerability Could Lead To Arbitrary Code Execution7.8 High
- softmaker office textmaker 2021In SoftMaker Software GmbH SoftMaker Office TextMaker 2021 (revision 1014), a specially crafted...8.8 High
- Show moreLoading…