CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- google tensorflowInt overflow in `RaggedRangeOp` in Tensoflow5.9 Medium
- linux kernelThere is an int overflow vulnerability in vmwgfx driver6.3 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8017 firmware +49 more +51 moreMemory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in...9.4 Critical
- qualcomm, inc. snapdragon connectivity, snapdragon mobile, snapdragon wearables, qualcomm ar8035 firmware, qca8081 firmware +21 more +23 moreMemory corruption in audio while playing record due to improper list handling in two threads in...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon mobile, snapdragon wearables, qualcomm ar8035 firmware, qca6595au firmware +28 more +30 moreMemory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +152 more +154 moreMemory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon...8.4 High
- watchguard firewareAn integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote...9.8 Critical
- google android, mediatek, inc. mt6779, mt6781, mt6785, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8512a, mt8518, mt8519 m1v1, mt8519 p1v1, mt8791, mt8797, mt8798, yoctoproject yocto +2 moreIn audio ipi, there is a possible out of bounds write due to an integer overflow. This could lead...6.7 Medium
- google android, mediatek, inc. mt6833, mt6853, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8791, mt8797 +1 moreIn vow, there is a possible out of bounds read due to an integer overflow. This could lead to...4.4 Medium
- google android, mediatek, inc. mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6875, mt6877, mt6879, mt6885, mt6893, mt6895, mt6983 +1 moreIn teei, there is a possible memory corruption due to an integer overflow. This could lead to...6.7 Medium
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video...6.1 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm ar8035 firmware, qca6174a firmware +63 more +65 morePossible integer overflow and memory corruption due to improper validation of buffer size sent to...8.4 High
- google androidIn extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read...5.5 Medium
- google androidIn PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means...7.8 High
- microsoft waylandAn internal reference count is held on the buffer pool, incremented every time a new buffer is...6.6 Medium
- glyphandcog xpdfreaderIn Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to...7.8 High
- glyphandcog xpdfreaderXpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc.7.8 High
- freedesktop poppler, debian linux, fedoraproject fedora +2 morePoppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder ...7.8 High
lz4-syscrates.iolz4-sys vulnerable to memory corruption via issue in liblz49.8 Critical- imagemagickAn integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in...5.5 Medium
- xpdfreader xpdf, freedesktop poppler +1 moreXpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream:...7.8 High
- parity frontierMessage length overflow in frontier7.1 High
- blenderA loaded (and valid) image can be crafted such that an out-of-bounds read or write occurs when...7.5 High
- mapbox, mapbox maps software development kit +1 moreMapbox is vulnerable to Integer Overflow7.5 High
- google androidIn Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead...8.8 High
- google androidIn Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead...8.8 High
- apache avroInteger overflow when reading corrupted .avro file in Avro Rust SDK7.5 High
- google chrome, chrome os, linux and chrome os +2 moreInteger overflow in Window Manager in Google Chrome on Chrome OS and Lacros prior to 104.0.5112...8.8 High
- estsoft alyacAn integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. A...7.3 High
- estsoft alyacAn integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. A...7.3 High
- google android, samsung mobile devices +1 moreImproper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause...8.6 High
- google androidIn AllocateInternalBuffers of g3aa_buffer_allocator.cc, there is a possible out of bounds write...7.8 High
- google androidIn construct_transaction of lwis_ioctl.c, there is a possible out of bounds write due to an...6.7 Medium
- google androidIn ioctl_dpm_clk_update of lwis_ioctl.c, there is a possible out of bounds write due to an...6.7 Medium
- rizinRizin v0.4.0 and below was discovered to contain an integer overflow via the function...5.5 Medium
- cesanta mjsAn issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6)....5.5 Medium
- gnome gdk-pixbuf, debian linux, fedoraproject fedora +2 moreGNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when...7.8 High
- gpac, gpac gpac/gpac +1 moreInteger Overflow or Wraparound in gpac/gpac7.8 High
- fortinet fortios, fortiproxy, fortiswitch +3 more +5 moreAn integer overflow / wraparound vulnerability [CWE-190] in FortiSwitch 7.0.2 and below, 6.4.9...4.3 Medium
- wolfsshWolfSSH v1.4.7 was discovered to contain an integer overflow via the function...9.8 Critical
- nvidia dgx a100, dgx a100 firmware +1 moreNVIDIA DGX A100 contains a vulnerability in SBIOS in the SmmCore, where a user with high...7.5 High
- vim, vim vim/vim, debian linux +1 more +3 moreInteger Overflow or Wraparound in vim/vim7.8 High
- debian linux, gstreamer +1 moreDOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux...7.8 High
- debian linux, gstreamer +1 moreDOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow...7.8 High
- debian linux, gstreamer +1 moreDOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in...7.8 High
- debian linux, gstreamer +1 moreDOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in...7.8 High
- debian linux, gstreamer +1 moreDOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in...7.8 High
- debian linux, gstreamer +1 moreInteger overflow in avidemux element in gst_avi_demux_invert function which allows a heap...7.8 High
- debian linux, gstreamer +1 moreInteger overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which...7.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreIn the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have...8.8 High
- Show moreLoading…