CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- harfbuzz project harfbuzz, fedoraproject fedora +1 moreAn integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers...5.5 Medium
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moreA vulnerability was found in ImageMagick, causing an outside the range of representable values of...7.8 High
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moreA vulnerability was found in ImageMagick, causing an outside the range of representable values of...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8017 firmware +50 more +52 moreMemory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile...9.8 Critical
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreRead beyond bounds in ap_strcmp_match()9.1 Critical
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreread beyond bounds via ap_rwrite()5.3 Medium
- google android, mediatek, inc. mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt9636, mt9638, mt9666 +1 moreIn apusys driver, there is a possible system crash due to an integer overflow. This could lead to...4.4 Medium
- google android, mediatek, inc. mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt9636, mt9638, mt9666 +1 moreIn apusys driver, there is a possible system crash due to an integer overflow. This could lead to...4.4 Medium
- google android, mediatek, inc. mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt9636, mt9638, mt9666 +1 moreIn apusys driver, there is a possible system crash due to an integer overflow. This could lead to...4.4 Medium
- google androidIn ioctl_dpm_qos_update and ioctl_event_control_set of (TBD), there is a possible out of bounds...6.7 Medium
- vaporInteger Overflow in Vapor's HTTP Range Request7.5 High
- polonel polonel/trudesk, trudesk project trudesk +1 moreInteger Overflow or Wraparound in polonel/trudesk7.6 High
- apple macos, mac os x, security update - catalina +2 moreAn integer overflow was addressed with improved input validation. This issue is fixed in Security...9.8 Critical
- apple ipados, itunes, macos +3 more +5 moreAn integer overflow issue was addressed with improved input validation. This issue is fixed in...9.8 Critical
tensorflowPyPI,tensorflow-cpuPyPI,tensorflow-gpuPyPI +2 more`CHECK` failure in depthwise ops via overflowsNo score- epub2txt2 project epub2txt2epub2txt2 v2.04 was discovered to contain an integer overflow via the function bug in...5.5 Medium
- chainsafe lodestarInteger Overflow in Lodestar7.5 High
- solanalabs rbpfInteger overflow in solana_rbpf7.5 High
- google tensorflowInteger overflow in `SpaceToBatchND` in TensorFlow5.5 Medium
- polonel polonel/trudesk, trudesk project trudesk +1 moreInteger Overflow or Wraparound in polonel/trudesk8.4 High
- spring security, vmware spring security, netapp active iq unified manager +1 more +3 moreInteger overflow in BCrypt class in Spring Security5.3 Medium
- polonel polonel/trudesk, trudesk project trudesk +1 moreAllowing long password leads to denial of service in polonel/trudesk in polonel/trudesk7.6 High
- polonel polonel/trudesk, trudesk project trudesk +1 moreThe trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in…7.2 High
- linux kernel, netapp h300s firmware, h410s firmware +2 more +4 moreInteger Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to...7.8 High
- fisco-bcosFISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node, via an...7.5 High
- fisco-bcosFISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node can...7.5 High
- causefx causefx/organizr, organizr +1 moreUncontrolled Resource Consumption in causefx/organizr9.9 Critical
- siemens jt2go, teamcenter visualization v13.3, teamcenter visualization v14.0 +1 more +3 moreA vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization...5.5 Medium
- htmldoc project htmldoc, debian linux +1 moreThere is a vulnerability in htmldoc 1.9.16. In image_load_jpeg function image.cxx when it calls...5.5 Medium
- anker eufy homebase 2, eufy homebase 2 firmware +1 moreA denial of service vulnerability exists in the libxm_av.so DemuxCmdInBuffer functionality of...7.4 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x...7.5 High
- rockcarry ffjpegIn ffjpeg (commit hash: caade60), the function bmp_load() in bmp.c contains an integer overflow...6.5 Medium
- arm mbed-ualloc memory library, mbed ualloc +1 moreARM mbed-ualloc memory library Integer Overflow or Wraparound7.3 High
- tencent tencentos-tinyTencentOS-tiny Integer Overflow or Wraparound7.3 High
- nxp mqxNXP MQX Integer Overflow or Wraparound7.3 High
- nxp mcuxpresso sdk, mcuxpresso software development kit +1 moreNXP MCUXpresso SDK Integer Overflow or Wraparound7.3 High
- arm cmsis rtos2, cmsis-rtos +1 moreARM CMSIS RTOS2 Integer Overflow or Wraparound7.3 High
- arm mbedARM mbed Integer Overflow or Wraparound7.3 High
- cesanta software mongoose-os, cesanta mongoose os +1 moreCesanta Software Mongoose-OS Integer Overflow or Wraparound7.3 High
- uclibc-nguClibc-ng Integer Overflow or Wraparound7.3 High
- micrium os, silabs micrium os +1 moreMicrium OS Integer Overflow or Wraparound6.5 Medium
- ecoscentric ecospro, ecospro rtos +1 moreeCosCentric eCosPro RTOS Integer Overflow or Wraparound4.6 Medium
- riot os, riot-os riot +1 moreRIOT OS Integer Overflow or Wraparound7.3 High
- google android, mediatek, inc. mt6580, mt6735, mt6737, mt6739, mt6750, mt6750s, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6797, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6893, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8675, mt8695, mt8696, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn ion, there is a possible use after free due to an integer overflow. This could lead to local...7.8 High
- google android, linux kernel, mediatek, inc. mt9011, mt9215, mt9216, mt9220, mt9221, mt9255, mt9256, mt9266, mt9269, mt9285, mt9286, mt9288, mt9600, mt9602, mt9610, mt9611, mt9612, mt9613, mt9615, mt9617, mt9629, mt9630, mt9631, mt9632, mt9636, mt9638, mt9639, mt9650, mt9652, mt9666, mt9669, mt9670, mt9675, mt9685, mt9686, mt9688 +2 moreIn subtitle service, there is a possible application crash due to an integer overflow. This could...4.4 Medium
- google fuchsia, google llc fuchsia kernel +1 moreInteger Overflow in Fuchsia Kernel5.3 Medium
- xmlsoft libxml2, libxslt, debian linux +19 more +21 moreIn libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c ...6.5 Medium
- qemu, debian linux, redhat enterprise linux +2 moreA flaw was found in the QXL display device emulation in QEMU. An integer overflow in the...8.2 High
- nvidia jetson linux, jetson agx xavier series, jetson xavier nx +1 moreNVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_mount function,...5.0 Medium
- nvidia jetson linux, jetson agx xavier series, jetson xavier nx +1 moreNVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_read_file function,...5.7 Medium
- Show moreLoading…