CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- google androidIn fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow....6.7 Medium
- google androidIn parseTrackFragmentRun() of MPEG4Extractor.cpp, there is a possible out of bounds read due to...9.8 Critical
- ge digital industrial gateway server, microsoft .net-sdk, ptc kepware kepserverex +10 more +12 moreThe affected products are vulnerable to an integer overflow or wraparound, which could allow an...9.8 Critical
- google chromeInteger overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to...8.8 High
- linux kernelafu_mmio_region_get_by_offset in drivers/fpga/dfl-afu-region.c in the Linux kernel through 6.1.12...7.8 High
- intel trace analyzer and collectorInteger overflow in the Intel(R) Trace Analyzer and Collector software before version 2021.5 may...4.8 Medium
- hasherezade (github) libpeconvLibpeconv – integer overflow9.8 Critical
- microsoft windows, office for android, office for ios +32 more +34 moreWindows Graphics Component Remote Code Execution Vulnerability7.8 High
- microsoft word, 365 apps for enterprise, office 2019 +19 more +21 moreMicrosoft Word Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +12 more +14 moreWindows iSCSI Discovery Service Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Media Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreMicrosoft ODBC Driver Remote Code Execution Vulnerability8.8 High
- microsoft sql server, sql server 2014 service pack 3 (cu 4), sql server 2014 service pack 3 (gdr) +7 more +9 moreMicrosoft ODBC Driver for SQL Server Remote Code Execution Vulnerability7.8 High
- qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +160 more +162 moreInteger overflow to buffer overflow in User Identity Module7.8 High
- google chromeInteger overflow in Core in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who...7.5 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn wlan driver, there is a possible missing params check. This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn wlan driver, there is a possible missing params check. This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn wlan driver, there is a possible missing params check. This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn wlan driver, there is a possible missing params check. This could lead to local denial of...5.5 Medium
- linux kernelA memory leak flaw and potential divide by zero and Integer overflow was found in the Linux...5.5 Medium
- google android, mediatek, inc. mt6735, mt6737, mt6739, mt6753, mt6757, mt6761, mt6763, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6855, mt6873, mt6877, mt6879, mt6885, mt6889, mt6893, mt6895, mt6983 +1 moreIn ged, there is a possible out of bounds write due to an integer overflow. This could lead to...6.7 Medium
- schneider electric igss data server (igssdataserver.exe), schneider-electric interactive graphical scada system +1 moreA CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer...9.8 Critical
- apache portable runtime (apr), portable runtime +1 moreApache Portable Runtime (APR): Windows out-of-bounds write in apr_socket_sendv function9.8 Critical
- apache portable runtime utility, apache software foundation portable runtime utility (apr-util) +1 moreApache Portable Runtime Utility (APR-util): out-of-bounds writes in the apr_base64 family of functions6.5 Medium
- apache portable runtime (apr), portable runtime +1 moreApache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions9.8 Critical
- oneidentity syslog-ng, syslog-ng store box +1 moreCVE-2022-38725 affecting package syslog-ng for versions less than 3.33.2-77.5 High
- redisInteger overflow in certain command arguments can drive Redis to OOM panic5.5 Medium
- redisInteger overflow in multiple Redis commands can lead to denial-of-service5.5 Medium
- gpacInteger overflow vulnerability in function Q_DecCoordOnUnitSphere file bifs/unquantize.c in GPAC...5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC Font Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- gitInteger overflow in `git archive`, `git log --format` leading to RCE in git9.8 Critical
- gitgitattributes parsing integer overflow in git9.8 Critical
- publify publify/publify, publify project publify +1 moreInteger Overflow or Wraparound in publify/publify7.6 High
- debian linux, linux kernel, netapp hci baseboard management controller +1 more +3 moreIn rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there...7.8 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +10 more +12 moreImportant: kernel security and bug fix update7.8 High
- qtAn integer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2....8.8 High
- amd ryzen 5000 series, ryzen 3 3100 firmware, ryzen 3 3200g firmware +102 more +104 moreFailure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an...5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Print Spooler Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft Cryptographic Services Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft Cryptographic Services Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability7.5 High
- bzip2 project bzip2bzip2 allows attackers to cause a denial of service via a large file that triggers an integer overflow7.5 High
- matrixsslMatrixSSL 4.0.4 through 4.5.1 has an integer overflow in matrixSslDecodeTls13. A remote attacker might be able to send a crafted TLS Message to cause a buffer overflow and achieve remote code executio…8.1 High
- qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +120 more +122 moreInteger overflow to buffer overflow in Audio5.9 Medium
- qualcomm apq8064au firmware, apq8096au firmware, msm8996au firmware +22 more +24 moreInteger Overflow to Buffer Overflow in Automotive9.3 Critical
- synology router manager, router manager (srm) +1 moreInteger overflow or wraparound vulnerability in CGI component in Synology Router Manager (SRM)...6.5 Medium
- gpacGPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is has an integer overflow in isomedia/isom_write.c7.8 High
- gpacGPAC MP4box 2.1-DEV-rev574-g9d5bb184b is contains an Integer overflow vulnerability in...7.1 High
- Show moreLoading…