CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- google tensorflowTensorFlow segfault in array_ops.upper_bound7.5 High
- linux, linux kernel +1 moremedia: dvb-frontends: tda10048: Fix integer overflow5.5 Medium
- debian linux, linux kernel +1 morecdrom: rearrange last_media_change check to avoid unintentional overflow7.8 High
- linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 moremm: avoid overflows in dirty throttling logic4.4 Medium
- apple ipados, macos, tvos +5 more +7 moreAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.7...5.5 Medium
- linux, linux kernel +1 moredrm/xe: Fix potential integer overflow in page size calculation7.8 High
- ni labviewInteger Overflow Vulnerability Reading TDMS Files in LabVIEW5.5 Medium
- acassen keepalivedIn the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer...9.8 Critical
fionaPyPIFiona affected by CVE-2023-45853 related to MiniZip madler-zlib9.3 Critical- linux, linux kernel +1 moreusb: gadget: rndis: prevent integer overflow in rndis_set_response()7.8 High
- linux, linux kernel +1 moreeeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moreblock/ioctl: prefer different overflow check7.8 High
- linux, linux kernel +1 moreptp: fix integer overflow in max_vclocks_store7.8 High
- everest everest-coreEVerest has an integer overflow in the "v2g_incoming_v2gtp" function9.1 Critical
- adobe bridgeAdobe Bridge has an integer overflow vulnerability when parsing SVG file7.8 High
- tencent rapidjsonTencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer Overflow6.8 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft Windows Performance Data Helper Library Remote Code Execution Vulnerability7.2 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 21h2 +11 more +13 moreSecure Boot Security Feature Bypass Vulnerability6.8 Medium
- microsoft windows, windows 11 version 21h2, windows 11 version 22h2 +8 more +10 moreWindows Hyper-V Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Filtering Platform Elevation of Privilege Vulnerability7.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreSQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability8.8 High
- openvpn tap-windows6, openvpn-gui, gui +1 more +3 moretap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming...9.8 Critical
- realtek rtl819x jungle sdk, level1 wbr-6013 firmware, level one wbr6013 +3 more +5 moreAn integer overflow vulnerability exists in the boa updateConfigIntoFlash functionality of...7.2 High
- qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +109 more +111 moreInteger Overflow or Wraparound in Graphics8.4 High
- linux, linux kernel +1 mores390/ap: Fix crash in AP internal function modify_bitmap()5.5 Medium
- linux, linux kernel +1 morefs/ntfs3: Use 64 bit variable to avoid 32 bit overflow5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moretcp: Fix shift-out-of-bounds in dctcp_update_alpha().5.5 Medium
- open-quantum-safe oqs-provider, open quantum safe oqs provider +1 moreBuffer overflow in deserialization in oqs-provider8.2 High
- ffmpegFFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder.6.2 Medium
- ffmpegAn integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows...6.5 Medium
- ffmpegFFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of...9.1 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 moreWinlogon Elevation of Privilege Vulnerability5.5 Medium
- microsoft windows server 2022, windows server 2022, 23h2 edition (server core installation), windows server 2022 23h2 +2 moreWindows Kernel Elevation of Privilege Vulnerability8.8 High
- microsoft windows 11 version 22h2, windows 11 version 23h2, windows server 2022, 23h2 edition (server core installation) +3 more +5 moreMicrosoft Event Trace Log File Parsing Remote Code Execution Vulnerability7.8 High
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()7.6 High
- thekelleys dnsmasqdnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.7.5 High
- netty netty-incubator-codec-ohttpnetty-incubator-codec-ohttp's BoringSSLAEADContext Repeats Nonces5.9 Medium
- aomedia libaomheap buffer overflow in libaom10.0 Critical
- chromium libvpx, debian linux +1 moreInteger overflow in libvpx5.9 Medium
- google androidIn wl_notify_rx_mgmt_frame of wl_cfg80211.c, there is a possible out of bounds write due to an...9.8 Critical
- google android, pixel +1 moreIn prepare_response of lwis_periodic_io.c, there is a possible out of bounds write due to an...7.8 High
- google androidIn CacheOpPMRExec of cache_km.c, there is a possible out of bounds write due to an integer...7.8 High
- qualcomm ar8035 firmware, fastconnect 7800 firmware, qca6554a firmware +28 more +30 moreInteger Overflow or Wraparound in WLAN HOST6.7 Medium
- linux, linux kernel +1 moredrm/xe/xe_migrate: Cast to output precision before multiplying operands5.5 Medium
- linux, linux kernel +1 morebpf: Check bloom filter map value size7.8 High
- linux, linux kernel +1 moreblock: fix overflow in blk_ioctl_discard()5.5 Medium
- microchip mplab harmony, mplab® harmony 3 core module +1 moreMicrochip Harmony 3 Core library allows read and write access to RAM via a SCSI READ or WRITE command7.0 High
- gstreamer, debian linux +1 moreGStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- Show moreLoading…