CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- google android, linuxfoundation yocto, mediatek, inc. mt6739, mt8167, mt8321, mt8365, mt8385, mt8666, mt8765, mt8788 +2 moreIn wlan firmware, there is possible system crash due to an integer overflow. This could lead to...7.5 High
- google android, linuxfoundation yocto, mediatek, inc. mt6739, mt8167, mt8168, mt8321, mt8365, mt8385, mt8666, mt8765, mt8788 +2 moreIn wlan firmware, there is possible system crash due to an integer overflow. This could lead to...7.5 High
- google android, linuxfoundation yocto, mediatek, inc. mt6739, mt8167, mt8321, mt8365, mt8385, mt8666, mt8765, mt8788 +2 moreIn wlan firmware, there is possible system crash due to an integer overflow. This could lead to...7.5 High
- google android, mediatek, inc. mt6580, mt6731, mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985, mt8185, mt8321, mt8385, mt8666, mt8667, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797 +1 moreIn keyinstall, there is a possible out of bounds write due to an integer overflow. This could...6.7 Medium
- nvidia gpu display driver for linux, gpu display driver +1 moreNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an...7.1 High
- gstreamerGStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability7.6 High
- google androidIn rw_i93_send_to_upper of rw_i93.cc, there is a possible out of bounds write due to an integer...7.8 High
- autodesk alias, autocad, autocad advance steel +14 more +16 moreA maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow...7.8 High
- widevine trusted applicationWidevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagParseAndStoreData integer...9.8 Critical
- widevine trusted applicationWidevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagVerifyProvisioning integer...9.8 Critical
- widevine trusted applicationWidevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys total_len...9.8 Critical
- widevine trusted applicationWidevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys prefix_len...9.8 Critical
- widevine trusted applicationWidevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys file_name_len integer...9.8 Critical
- widevine trusted applicationWidevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys feature_name_len...9.8 Critical
- apple ipados, macos, watchos +3 more +5 moreAn integer overflow was addressed with improved input validation. This issue is fixed in watchOS...7.8 High
- kilo project kiloBuffer Overflow vulnerability in Antirez Kilo before commit...7.5 High
- microsoft publisher, 365 apps, 365 apps for enterprise +6 more +8 moreMicrosoft Publisher Remote Code Execution Vulnerability7.8 High
- xerial snappy-javasnappy-java's Integer Overflow vulnerability in compress leads to DoS5.9 Medium
- xerial snappy-javasnappy-java's Integer Overflow vulnerability in shuffle leads to DoS5.9 Medium
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +6 more +8 moreRemote Procedure Call Runtime Denial of Service Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Authentication Elevation of Privilege Vulnerability7.0 High
- renderdocRenderDoc through 1.26 allows an Integer Overflow with a resultant Buffer Overflow (issue 2 of 2).9.8 Critical
- renderdocRenderDoc through 1.26 allows an Integer Overflow with a resultant Buffer Overflow (issue 1 of 2).9.8 Critical
- google androidIn VideoFrame of VideoFrame.h, there is a possible abort due to an integer overflow. This could...7.5 High
- google androidProduct: AndroidVersions: Android SoCAndroid ID: A-2777758709.8 Critical
- imagemagick, debian linux, fedoraproject extra packages for enterprise linux +2 more +4 moreA vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of...5.5 Medium
- freeswitch sofia-sip, debian linux +1 moreheap-over-flow and integer-overflow in sofia-sip7.5 High
- huawei emuiInteger overflow vulnerability in some phones. Successful exploitation of this vulnerability may...7.5 High
- garmin connect-iqThe `Toybox.Graphics.BufferedBitmap.initialize` API method in CIQ API version 2.3.0 through 4.1.7...9.8 Critical
- sysstat project sysstat, debian linux, fedoraproject fedora +2 moresysstat through 12.7.2 allows a multiplication integer overflow in check_overflow in common.c....7.8 High
- libcap project libcap, debian linux, fedoraproject fedora +1 more +3 moreA vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can...7.8 High
- cloudflare workerdBuffer under-read in workerd6.5 Medium
- vyperlang vyperVyper vulnerable to integer overflow in loop7.5 High
- intel server system d50tnp1mhcpac firmware, server system d50tnp1mhcrac firmware, server system d50tnp1mhcrlc firmware +7 more +9 moreInteger overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a...6.0 Medium
- microsoft windows 10 version 1809, windows 10 version 20h2, windows 10 version 21h2 +12 more +14 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows iSCSI Target Service Information Disclosure Vulnerability5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn soter service, there is a possible out of bounds write due to a missing bounds check. This...4.4 Medium
- vim, vim vim/vim +1 moreInteger Overflow or Wraparound in vim/vim7.8 High
- apple ipados, macos, tvos +3 more +5 moreAn integer overflow was addressed with improved input validation. This issue is fixed in macOS...7.8 High
- apple ipados, macos, iphone os +2 moreAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.2...8.6 High
- sonos one speaker, one firmware, s1 +1 more +3 moreThis vulnerability allows network-adjacent attackers to disclose sensitive information on...5.4 Medium
- avira antivirusA vulnerability within the Avira network protection feature allowed an attacker with local...7.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInteger overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who...9.6 Critical
- altran picotcpAltran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because...7.5 High
- artifex mujsBuffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. An integer overflow...9.8 Critical
- autodesk autocad, autocad advance steel, autocad architecture +7 more +9 moreA maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to cause...7.8 High
- protobuf-c project protobuf-cprotobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.5.5 Medium
- microsoft windows server 2022Windows DNS Server Information Disclosure Vulnerability4.9 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 20h2 +16 more +18 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreWindows Kernel Remote Code Execution Vulnerability7.8 High
- Show moreLoading…