CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- apple ipados, safari, tvos +4 more +6 moreAn integer overflow was addressed with improved input validation. This issue is fixed in tvOS 17...8.8 High
- linux, linux kernel +1 moredrm/mediatek: Fix coverity issue with unintentional integer overflow5.5 Medium
- linux, linux kernel +1 morevirtio-blk: fix implicit overflow on virtio_max_dma_size5.5 Medium
- linux, linux kernel +1 morelib/generic-radix-tree.c: Don't overflow in peek()5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebpf: Protect against int overflow for stack access size7.8 High
- linux, linux kernel +1 morebpf: Guard stack limits against 32bit overflow7.8 High
- linux, linux kernel +1 moreio_uring/net: fix overflow check in io_recvmsg_mshot_prep()7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows, windows 10 version 1809, windows 10 version 21h2 +17 more +19 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- npgsqlNpgsql Vulnerable to SQL Injection via Protocol Message Size Overflow8.1 High
- openatom openharmonyArkcompiler runtime has an integer overflow vulnerability3.3 Low
- qualcomm aqt1000 firmware, ar8035 firmware, fastconnect 6200 firmware +156 more +158 moreInteger Overflow or Wraparound in HLOS5.9 Medium
- unified automation uagatewayUnified Automation UaGateway Certificate Parsing Integer Overflow Denial-of-Service Vulnerability8.6 High
- uriparser project uriparser, fedoraproject fedora +1 moreAn issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an...5.9 Medium
- uriparser project uriparser, fedoraproject fedora +1 moreAn issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an...8.6 High
- stb vorbis.c, stb vorbis project vorbis, fedoraproject fedora +1 more +3 moreA heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c...9.8 Critical
- qnap qts, quts hero, qutscloud +2 moreQTS, QuTS hero, QuTScloud6.5 Medium
- cosmwasm cosmwasm-stdCosmWasm affected by arithmetic overflows3.7 Low
- freerdp, fedoraproject fedora +1 moreFreeRDP Integer overflow & OutOfBound Write in clear_decompress_residual_data9.8 Critical
- ivanti avalancheAn Integer Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3...7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebpf: Fix hashtab overflow check on 32-bit arches7.8 High
- libcoap, fedoraproject fedora +1 moreAn issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause undefined behavior via a...7.5 High
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The...2.0 Low
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreOn 32-bit versions there were integer-overflows that led to an out-of-bounds-read that...5.9 Medium
- debian linux, linux kernel +1 moreamdkfd: use calloc instead of kzalloc to avoid integer overflow5.5 Medium
- adobe animateAnimate has an arbitrary code execution vulnerability when parsing svg files7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreSecure Boot Security Feature Bypass Vulnerability6.7 Medium
- microsoft ole db driver for sql server, ole db driver 18 for sql server, ole db driver 19 for sql server +6 more +8 moreMicrosoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft odbc driver for sql server, odbc driver 17 for sql server on linux, odbc driver 17 for sql server on macos +17 more +19 moreMicrosoft ODBC Driver for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft odbc driver for sql server, odbc driver 17 for sql server on linux, odbc driver 17 for sql server on macos +17 more +19 moreMicrosoft ODBC Driver for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft odbc driver for sql server, odbc driver 17 for sql server on linux, odbc driver 17 for sql server on macos +17 more +19 moreMicrosoft ODBC Driver for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreSecure Boot Security Feature Bypass Vulnerability6.4 Medium
- openexrAn issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to...3.3 Low
- linux, linux kernel +1 morenetfilter: nft_limit: reject configurations that cause integer overflow5.5 Medium
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +31 more +33 moreInteger Overflow to Buffer Overflow in Graphics Windows8.4 High
- qualcomm auto 4g modem firmware, auto 5g modem-rf firmware, c-v2x 9150 +4 more +6 moreInteger Overflow to Buffer Overflow in Automotive Telematics7.5 High
- google android, mediatek, inc. mt6739, mt6768, mt6781, mt6833, mt6853, mt6877, mt6883, mt6885, mt6893, mt8183, mt8188, mt8765, mt8766, mt8768, mt8786, mt8788, mt8791, mt8797 +1 moreIn battery, there is a possible out of bounds read due to an integer overflow. This could lead to...5.4 Medium
- google android, mediatek mt6761, mt6765 +20 more +22 moreIn battery, there is a possible escalation of privilege due to an integer overflow. This could...6.6 Medium
- zephyrproject zephyrBluetooth: integer underflow in gatt_find_info_rsp6.8 Medium
- eclipse threadxInteger wraparounds, under-allocations, and heap buffer overflows in Eclipse ThreadX xQueueCreate() and xQueueCreateSet()7.3 High
- eclipse threadx netx duo, eclipse foundation threadx +1 moreInteger wraparound, under-allocation, and heap buffer overflow in Eclipse ThreadX NetX Duo __portable_aligned_alloc()7.0 High
- linux, linux kernel +1 moreneighbour: allow NUD_NOARP entries to be forced GCed7.5 High
- mitsubishi melsec l06cpu\(-p\), melsec l26cpu\(-p\), melsec q03udvcpu +48 more +50 moreInteger Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series...9.8 Critical
- Show moreLoading…