CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- google android, mediatek, inc. mt6580, mt6731, mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985, mt8185, mt8321, mt8385, mt8666, mt8667, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797 +1 moreIn keyinstall, there is a possible out of bounds write due to an integer overflow. This could...6.7 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn wlan driver, there is a possible missing bounds check. This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn wlan driver, there is a possible missing bounds check. This could lead to local denial of...5.5 Medium
- nvidia gpu display driver, gpu display driver for linux +1 moreSecurity update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed5.3 Medium
- nvidia gpu display driver, cloud gaming, vgpu software (guest driver) - linux, vgpu software (virtual gpu manager), nvidia cloud gaming (guest driver), nvidia cloud gaming (virtual gpu manager) +1 more +3 moreNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an Integer overflow may lead to denial of service or information disclosure.7.1 High
- debian linux, nvidia gpu display driver, cloud gaming +2 more +4 morenvidia-graphics-drivers-legacy-390xx - security update4.4 Medium
- debian linux, nvidia gpu display driver, cloud gaming +2 more +4 morenvidia-graphics-drivers-legacy-390xx - security update5.3 Medium
- debian linux, nvidia gpu display driver, cloud gaming +2 more +4 morenvidia-graphics-drivers-legacy-390xx - security update5.3 Medium
- nvidia cloud gaming, vgpu software (guest driver) - linux, vgpu software (virtual gpu manager), nvidia cloud gaming (guest driver), nvidia cloud gaming (virtual gpu manager), virtual gpu +2 moreNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow in index validation may lead to denial of service, information disclosure,…5.3 Medium
- nvidia gpu display driver, gpu display driver for linux +1 moreNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, information disclosure, or data ta…4.4 Medium
- gnupg libksba, debian linux +1 moreLibksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.9.8 Critical
- apple ipados, macos, iphone os +2 moreAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 15.6...7.8 High
- radare radare2, radareorg radareorg/radare2 +1 moreInteger Overflow or Wraparound in radareorg/radare26.1 Medium
- neutrinolabs xrdp, debian linux +1 moreInteger Overflow in xrdp8.2 High
- google android, samsung mobile devices +1 moreInteger overflow vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec...6.9 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8012 +1 moreIn wlan driver, there is a possible missing bounds check, This could lead to local denial of...3.3 Low
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8010 +1 moreIn wlan driver, there is a possible missing bounds check, This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8009 +1 moreIn wlan driver, there is a possible missing bounds check, This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8008 +1 moreIn wlan driver, there is a possible missing bounds check, This could lead to local denial of...5.5 Medium
- videolan vlc media player, debian linux +1 moreAn integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows...7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn wlan driver, there is a possible missing bounds check. This could lead to local denial of...5.5 Medium
- google androidIn sec_media_protect of media.c, there is a possible EoP due to an integer overflow. This could...7.8 High
- google androidIn ppmpu_set of ppmpu.c, there is a possible EoP due to an integer overflow. This could lead to...7.8 High
- google androidIn rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out of bounds read due to...7.5 High
- google androidIn several functions that parse avrc response in avrc_pars_ct.cc and related files, there are...7.5 High
- qemu, fedoraproject fedora +1 moreAn integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization...6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreAn issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth...7.8 High
- heimdal project heimdal, mit kerberos 5, samba +3 more +5 moreImportant: krb5 security update8.8 High
- azure-rtos filex, microsoft azure rtos filex +1 moreAzure RTOS FileX vulnerable to Buffer Offerflow5.6 Medium
- pixman, debian linux, fedoraproject fedora +2 moreIn libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer...8.8 High
- google androidIn shared_metadata_init of SharedMetadata.cpp, there is a possible out of bounds write due to an...7.8 High
- google androidIn fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow....6.7 Medium
- phpOOB read due to insufficient input validation in imageloadfont()6.5 Medium
- abode systems, inc. iota all-in-one security kit, goabode iota all-in-one security kit firmware +1 moreAn integer overflow vulnerability exists in the web interface /action/ipcamRecordPost...9.0 Critical
- xmlsoft libxml2, apple ipados, iphone os +17 more +19 moreAn issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with...7.5 High
- debian linux, extended keccak code package project keccak code package, fedoraproject fedora +9 more +11 moreBuffer overflow in sponge queue functions9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +271 more +273 moreMemory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in...9.8 Critical
- gnupg libksba, gnupg, gnupg vs-desktop +1 more +3 moreA vulnerability was found in the Libksba library due to an integer overflow within the CRL parser...9.8 Critical
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn sensor driver, there is a possible out of bounds write due to a missing bounds check. This...5.5 Medium
- gnu osipGNU oSIP v5.3.0 was discovered to contain an integer overflow via the component...6.5 Medium
- facebook hermesA write-what-where condition in hermes caused by an integer overflow, prior to commit...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, ar8035 firmware +65 more +67 moreDenial of service in BOOT when partition size for a particular partition is requested due to...4.6 Medium
- google androidIn rndis_set_response of rndis.c, there is a possible out of bounds write due to an integer...4.6 Medium
- google androidIn avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to an...7.5 High
- google androidIn DevmemIntHeapAcquire of TBD, there is a possible arbitrary code execution due to an integer...7.8 High
- ffmpegHeap-memory write in FFMPEG9.0 Critical
- squid-cache squidImportant: squid:4 security update8.6 High
- redis, fedoraproject fedora +1 moreRedis subject to Integer Overflow leading to Remote Code Execution via Heap Overflow7.0 High
- whatsapp, facebook whatsapp business for android, whatsapp business for ios +3 more +5 moreAn integer overflow in WhatsApp could result in remote code execution in an established video call.9.8 Critical
- google tensorflowInteger overflow in math ops in TensorFlow5.9 Medium
- Show moreLoading…