CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- ffmpegAn integer overflow vulnerability was found in FFmpeg 5.0.1 and in previous versions in...5.5 Medium
- dcraw project dcraw, debian linux +1 moreThere is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a...7.8 High
- graphisoft bimx desktop viewerAn exploitable code execution vulnerability exists in the file format parsing functionality of...8.8 High
- cisco ios xe, ios xe software +1 moreCisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service Vulnerability7.4 High
- debian linux, fedoraproject fedora, nothings stb image.h +2 morestb_image.h v2.27 was discovered to contain an integer overflow via the function...6.5 Medium
- leadtoolsAn integer overflow vulnerability exists in the fltSaveCMP functionality of Leadtools 22. A...8.8 High
- anycubic chitubox, chitubox anycubic plugin, chitubox basic +2 moreA heap-based buffer overflow vulnerability exists in the readDatHeadVec functionality of AnyCubic...7.8 High
- accusoft imagegearA heap-based buffer overflow vulnerability exists in the DecoderStream::Append functionality of...9.8 Critical
- vyperlang vyperInteger bounds error in Vyper8.8 High
- google android, mediatek, inc. mt6580, mt6731, mt6735, mt6750s, mt6753, mt6755s, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8127, mt8135, mt8163, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8176, mt8183, mt8312c, mt8312d, mt8321, mt8362a, mt8365, mt8382, mt8385, mt8389, mt8392, mt8392 90, mt8665, mt8685, mt8693, mt8735, mt8735b, mt8735m, mt8752, mt8765, mt8783, mt8785, mt8788 +1 moreIn ged, there is a possible out of bounds write due to an integer overflow. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6580, mt6735, mt6739, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6799, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6885, mt6893, mt6983, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8183, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8667, mt8675, mt8695, mt8696, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn preloader (usb), there is a possible out of bounds write due to an integer overflow. This...6.6 Medium
- google android, samsung mobile devices +1 moreImproper input validation in DSP driver prior to SMR Apr-2022 Release 1 allows out-of-bounds...4.4 Medium
- gpacGPAC mp4box 1.1.0-DEV-rev1663-g881c6a94a-master is vulnerable to Integer Overflow.5.5 Medium
- brianmario yajl-rubyBuffer Overflow and Integer Overflow in yajl-ruby5.9 Medium
- linux kernel, netapp h300e firmware, h300s firmware +6 more +8 moreAn integer overflow flaw was found in the Linux kernel’s virtio device driver code in the way a...7.8 High
- google androidIn tremolo, there is a possible out of bounds read due to an integer overflow. This could lead to...7.5 High
- google androidIn libstagefright, there is a possible out of bounds write due to an integer overflow. This could...7.8 High
- nvidia cuda toolkitNVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this...7.8 High
- minecraft bedrock serverMojang Bedrock Dedicated Server 1.18.2 is affected by an integer overflow leading to a bound...9.8 Critical
- microweber, microweber microweber/microweber +1 moreAble to create an account with long password leads to memory corruption / Integer Overflow in microweber/microweber5.3 Medium
- microweber, microweber microweber/microweber +1 moreThe microweber application allows large characters to insert in the input field "fist & last name" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microwebe…7.2 High
- microweber, microweber microweber/microweber +1 moreThe microweber application allows large characters to insert in the input field "post title" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/micr…7.1 High
- apache http server, debian linux, fedoraproject fedora +1 more +3 moremod_sed: Read/write beyond bounds9.8 Critical
- apache http server, apple mac os x, macos +4 more +6 morecore: Possible buffer overflow with very large or unlimited LimitXMLRequestBody9.1 Critical
- microweber, microweber microweber/microweber +1 moreInteger Overflow or Wraparound in microweber/microweber9.1 Critical
- google androidIn ion_buffer_kmap_get of ion.c, there is a possible use-after-free due to an integer overflow....7.8 High
- siemens ruggedcom i800, ruggedcom i800nc, ruggedcom i801 +150 more +152 moreA vulnerability has been identified in RUGGEDCOM ROS M2100 (All versions < V5.6.0), RUGGEDCOM ROS...5.9 Medium
- debian linux, fedoraproject fedora, network block device project block device +2 moreIn nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer...9.8 Critical
- gjtorikian commonmarker, github cmark-gfm +1 moreCommonMarker Integer Overflow Vulnerability9.8 Critical
- github cmark-gfm, fedoraproject fedora +1 moreInteger overflow in table parsing extension leads to heap memory corruption8.8 High
- tsmuxer project tsmuxerAn integer overflow in DTSStreamReader::findFrame() of tsMuxer git-2678966 allows attackers to...5.5 Medium
- google androidIn prepare_io_entry and prepare_response of lwis_ioctl.c and lwis_periodic_io.c, there is a...6.7 Medium
- google androidIn copy_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to an integer...7.8 High
- google androidIn lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an...6.7 Medium
- tp-link tl-wr840n firmwareTP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain an integer overflow via the function...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is an improper verification vulnerability in smartphones. Successful exploitation of this...7.5 High
- huawei harmonyosThe interface of a certain HarmonyOS module has an integer overflow vulnerability. Successful...9.8 Critical
- huawei emui, magic ui +1 moreThere is a software integer overflow leading to a TOCTOU condition in smartphones. Successful...7.0 High
- huawei harmonyosSome Huawei products have an integer overflow vulnerability. Successful exploitation of this...5.5 Medium
- blender, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreA missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds...7.8 High
- blender, debian linux +1 moreAn integer overflow in the processing of loaded 2D images leads to a write-what-where...7.8 High
- watchguard firewareAn integer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote...8.8 High
- trendmicro serverprotect, trend micro serverprotect for emc celerra, serverprotect for microsoft windows / novell netware +3 more +5 moreInteger overflow conditions that exist in Trend Micro ServerProtect 6.0/5.8 Information Server...9.8 Critical
- tp-link ac1750, ac1750 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.7.5 High
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.9.8 Critical
- google chromeInteger overflow in Mojo in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to...8.8 High
- golang go, debian linux, netapp beegfs csi driver +3 more +5 moreRat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can...7.5 High
- stormshield network securityStormshield Network Security (SNS) 3.x has an Integer Overflow in the high-availability component.5.8 Medium
tensorflowPyPI,tensorflow-cpuPyPI,tensorflow-gpuPyPI +2 moreInteger Overflow or Wraparound in TensorFlow5.5 Medium- Show moreLoading…