CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- google android, mediatek, inc. mt6833, mt6853, mt6873, mt6877, mt6883, mt6893, mt8791, mt8797 +1 moreIn ccu driver, there is a possible memory corruption due to an integer overflow. This could lead...6.7 Medium
- apple swiftnio http\/2, swift project swiftnio http2 +1 moreswift-nio-http2 vulnerable to denial of service via mishandled HPACK variable length integer encoding7.5 High
- schneider-electric interactive graphical scada system data serverA CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer...9.8 Critical
- high resolution streaming image server project resolution streaming image serverIIPImage High Resolution Streaming Image Server prior to commit...7.5 High
- google tensorflowInteger overflow in TFLite array creation7.6 High
- google tensorflowInteger overflow in Tensorflow7.6 High
- google tensorflowInteger overflow in TFLite8.8 High
- google tensorflowInteger overflow in Tensorflow6.5 Medium
- google tensorflowInteger overflow in Tensorflow6.5 Medium
- google tensorflowInteger overflow in Tensorflow8.8 High
- google tensorflowInteger overflow leading to crash in Tensorflow6.5 Medium
- google tensorflowOverflow and uncaught divide by zero in Tensorflow6.5 Medium
- google tensorflowInteger overflows in Tensorflow6.5 Medium
- google tensorflowInteger overflows in Tensorflow6.5 Medium
- google tensorflowMemory exhaustion in Tensorflow4.3 Medium
- google tensorflowInteger overflow in Tensorflow7.6 High
- mariadb, fedoraproject fedora +1 moreMariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash.5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6174a firmware +39 more +41 morePossible integer overflow due to improper fragment datatype while calculating number of fragments...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, aqt1000 firmware +189 more +191 moreImproper validation of data length received from DMA buffer can lead to memory corruption. in...7.8 High
- reolink rlc-410w firmwareA denial of service vulnerability exists in the netserver recv_command functionality of reolink...8.6 High
- solanalabs rbpfInteger overflow in solana_rbpf7.5 High
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreExpat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.7.5 High
- libexpat project libexpat, debian linux, netapp clustered data ontap +7 more +9 moreExpat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for...9.8 Critical
- mediatek linkit software development kitIn MediaTek LinkIt SDK before 4.6.1, there is a possible memory corruption due to an integer...9.8 Critical
- micrium uc\/libAn issue was discovered in lib_mem.c in Micrium uC/OS uC/LIB 1.38.x and 1.39.00. The following...9.8 Critical
- bluez, debian linux, fedoraproject fedora +2 moreA heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with...8.8 High
- allwinnertech android q sdkThere is an integer overflow in the ION driver "/dev/ion" of Allwinner R818 SoC Android Q SDK V1...7.5 High
- linux kernel, netapp h300e firmware, h300s firmware +6 more +8 moreImportant: kernel security and bug fix update8.4 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC annotation gestures integer overflow vulnerability7.8 High
- pypa pipenv, fedoraproject fedora +1 morePipenv's requirements.txt parsing allows malicious index url in comments8.0 High
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 moreaddBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 Critical
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 morebuild_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 Critical
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 moredefineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 Critical
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 morelookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.8.8 High
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 morenextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.8.8 High
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 morestoreAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.8.8 High
- digitalbazaar forgenode-forge ASN.1 OID Integer Truncation6.3 Medium
- huawei emui, magic ui +1 moreThere is an Integer overflow vulnerability with ACPU in smartphones. Successful exploitation of...9.8 Critical
- libexpat project libexpat, netapp active iq unified manager, clustered data ontap +8 more +10 moreIn doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for...8.1 High
- google android, mediatek, inc. mt6580, mt6739, mt6750, mt6750s, mt6753, mt6755, mt6757, mt6761, mt6762, mt6765, mt6768, mt6769, mt6771, mt6779, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8127, mt8163, mt8167, mt8168, mt8169, mt8173, mt8183, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8765, mt8788 +1 moreIn mdp driver, there is a possible memory corruption due to an integer overflow. This could lead...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +125 more +127 morePossible integer overflow in page alignment interface due to lack of address and size validation...9.3 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +124 more +126 morePossible integer overflow in access control initialization interface due to lack and size and...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +86 more +88 morePossible integer overflow to buffer overflow due to improper input validation in FTM ARA commands...7.8 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ar8035 firmware, qca6390 firmware +59 more +61 moreAn integer overflow due to improper check performed after the address and size passed are aligned...7.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8017 firmware +132 more +134 morePossible integer overflow due to improper validation of command length parameters while...7.8 High
- netgear d7800 firmware, r6400v2 firmware, r6700v3 firmware +2 moreCertain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This...6.5 Medium
- blackmagicdesign davinci resolveWhen parsing a file that is submitted to the DPDecoder service as a job, the service will use the...9.8 Critical
- google androidIn apusys, there is a possible memory corruption due to a missing bounds check. This could lead...6.7 Medium
- google androidIn ccu driver, there is a possible out of bounds read due to an integer overflow. This could lead...4.4 Medium
- fortinet fortiosAn integer overflow or wraparound vulnerability in the memory allocator of SSLVPN in FortiOS...8.1 High
- Show moreLoading…