CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- apache nuttxmalloc, realloc and memalign implementations are vulnerable to integer wrap-arounds9.8 Critical
- qemu, debian linux, fedoraproject fedora +2 moreAn integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in...6.0 Medium
- estsoft uneggUnEGG v0.5 and eariler versions have a Integer overflow vulnerability, triggered when the user...7.8 High
- accusoft imagegearA heap-based buffer overflow vulnerability exists in the PSD read_icc_icCurve_data functionality...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +80 more +82 morePossible integer overflow in RPMB counter due to lack of length check on user provided data in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +536 more +538 moreBuffer overflow might occur while parsing unified command due to lack of check of input data...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8096au firmware, aqt1000 firmware +143 more +145 moreResource leakage issue during dci client registration due to reference count is not decremented...6.7 Medium
- academysoftwarefoundation openexrAn integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0...5.5 Medium
- f5 nginx, debian linux +1 moreNGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a...9.8 Critical
- redis, fedoraproject fedora +1 moreRedis vulnerability in STRALGO LCS on 32-bit systems7.5 High
- apple filesMultiple integer overflows in the (1) cdf_read_property_info and (2) cdf_read_sat functions in...9.8 Critical
- chiyu-tech bf-630 firmware, bf-631 firmware, biosense firmware +8 more +10 moreA denial of service condition exists after an integer overflow in several IoT devices from CHIYU...6.5 Medium
- google androidIn setRange of ABuffer.cpp, there is a possible out of bounds write due to an integer overflow....8.8 High
- google androidIn phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due...6.7 Medium
- google androidIn decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to an integer...7.8 High
- squid-cache squid, fedoraproject fedora, netapp cloud manager +2 moreAn issue was discovered in Squid before 4.15 and 5.x before 5.0.6. An integer overflow problem...6.5 Medium
- squid-cache squid, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to an input-validation bug...6.5 Medium
- zephyrproject zephyrInteger Overflow in memory allocating functions6.9 Medium
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.13 security update7.5 High
- telegramTelegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by an...5.5 Medium
- virustotal yara, fedoraproject fedora +1 moreAn integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4...9.1 Critical
- google tensorflowCHECK-fail in AddManySparseToTensorsMap2.5 Low
- google tensorflowInteger overflow in TFLite concatentation6.3 Medium
- google tensorflowInteger overflow in TFLite memory allocation7.1 High
- google tensorflowCHECK-fail due to integer overflow2.5 Low
- postgresql, redhat enterprise linux, jboss enterprise application platform +1 more +3 moreA flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17...8.8 High
- windriver vxworks, oracle communications eagle +1 moreAn issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer...9.8 Critical
- djvulibre project djvulibre, debian linux +1 moreA flaw was found in djvulibre-3.5.28 and earlier. An integer overflow in function render() in...7.8 High
- yubico yubihsm-shellAn issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell through 2.0.3....4.4 Medium
- ti cc3100 software development kit, cc3200 software development kit, simplelink cc13x0 software development kit +4 more +6 moreAn integer overflow exists in the APIs of the host MCU while trying to connect to a WIFI network...7.8 High
- ti cc3100 software development kit, cc3200 software development kit, simplelink cc13x0 software development kit +4 more +6 moreMultiple integer overflow issues exist while processing long domain names, which may allow an...9.8 Critical
- ti cc3100 software development kit, cc3200 software development kit, simplelink cc13x0 software development kit +4 more +6 moreThe affected product is vulnerable to an integer overflow while processing HTTP headers, which...9.8 Critical
- ti cc3100 software development kit, cc3200 software development kit, simplelink cc13x0 software development kit +4 more +6 moreThe affected product is vulnerable to integer overflow while parsing malformed over-the-air...7.2 High
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, qualcomm apq8009w firmware, apq8017 firmware +412 more +414 morePossible integer overflow due to improper length check while flashing an image in Snapdragon...6.8 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +406 more +408 moreMemory corruption while processing crafted SDES packets due to improper length check in sdes...7.5 High
- redis, fedoraproject fedora +1 moreVulnerability in the COPY command for large intsets7.5 High
- redis, fedoraproject fedora +1 moreVulnerability in the STRALGO LCS command7.5 High
- academysoftwarefoundation openexr, debian linux, fedoraproject fedora +2 moreAn integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR...5.5 Medium
- academysoftwarefoundation openexr, debian linux, fedoraproject fedora +2 moreAn integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR...5.5 Medium
- eximExim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote...9.8 Critical
- eximExim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow in receive_add_recipient via an e...9.8 Critical
- eximExim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow because get_stdinput allows...7.8 High
- google androidIn memory management driver, there is a possible out of bounds write due to an integer overflow....7.8 High
- klibc project klibc, debian linux +1 moreAn issue was discovered in klibc before 2.0.9. Multiplication in the calloc() function may result...9.8 Critical
- klibc project klibc, debian linux +1 moreAn issue was discovered in klibc before 2.0.9. Multiple possible integer overflows in the cpio...9.8 Critical
- klibc project klibc, debian linux +1 moreAn issue was discovered in klibc before 2.0.9. An integer overflow in the cpio command may result...7.5 High
- lz4 project lz4, netapp active iq unified manager, cloud backup +7 more +9 moreThere's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4...9.8 Critical
- klibc project klibc, debian linux +1 moreAn issue was discovered in klibc before 2.0.9. Additions in the malloc() function may result in...9.8 Critical
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.8 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.8 High
- Show moreLoading…