CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- gnome libgsf, gnome project g structured file library (libgsf) +1 moreAn integer overflow vulnerability exists in the Compound Document Binary File format parser of v1...8.4 High
- gnome libgsf, gnome project g structured file library (libgsf) +1 moreAn integer overflow vulnerability exists in the Compound Document Binary File format parser of...8.4 High
- google chromeInteger overflow in Layout in Google Chrome prior to 129.0.6668.89 allowed a remote attacker to...8.8 High
- google android, pixel +1 moreIn ffu_flash_pack of ffu.c, there is a possible out of bounds read due to an integer overflow....4.4 Medium
- google android, pixel +1 moreIn vring_size of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds...7.8 High
- google androidIn DevmemXIntMapPages of devicemem_server.c, there is a possible arbitrary code execution due to...8.4 High
- cisco ios xe software, ios xe +1 moreA vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to...4.3 Medium
- google chromeInteger overflow in Skia in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to...8.8 High
- linux, linux kernel +1 moredrm/radeon: Fix integer overflow in radeon_cs_parser_init5.5 Medium
- linux, linux kernel +1 morebnxt: avoid overflow in bnxt_get_nvram_directory()5.5 Medium
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix u8 overflow5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Ensure index calculation will not overflow5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreAn integer overflow was addressed through improved input validation. This issue is fixed in...5.5 Medium
- linux, linux kernel +1 morenet/sched: sch_fq: fix integer overflow of "credit"5.5 Medium
- linux, linux kernel +1 morewifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf7.8 High
- linux, linux kernel +1 moreACPI: APEI: Fix integer overflow in ghes_estatus_pool_init()5.5 Medium
- linux, linux kernel +1 morecpufreq: CPPC: Add u64 casts to avoid overflowing5.5 Medium
- linux, linux kernel +1 moreperf/x86/amd: fix potential integer overflow on shift of a int5.5 Medium
- linux, linux kernel +1 morefirmware: arm_scmi: Fix list protocols enumeration in the base protocol8.4 High
- linux, linux kernel +1 moreRDMA/hfi1: Fix potential integer multiplication overflow errors5.5 Medium
- linux, linux kernel +1 morewifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems()7.8 High
- shopkit project shopkitA Business Logic vulnerability in Shopkit 1.0 allows an attacker to add products with negative...7.5 High
- linux, linux kernel +1 morenet: stmmac: dwc-qos: Disable split header for Tegra1945.5 Medium
- eaton foreseer, foreseer electrical power monitoring system +1 moreThe Eaton Foreseer software provides multiple customizable input fields for the users to...5.6 Medium
- adobe illustratorIllustrator | Integer Overflow or Wraparound (CWE-190)7.8 High
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +4 more +6 moreWindows libarchive Remote Code Execution Vulnerability7.3 High
- siemens automation license manager v5, automation license manager v6.0, automation license manager v6.2 +1 more +3 moreA vulnerability has been identified in Automation License Manager V5 (All versions), Automation...9.2 Critical
- freebsdMultiple vulnerabilities in libnv7.5 High
- linux, linux kernel +1 moreworkqueue: Fix UBSAN 'subtraction overflow' error in shift_and_mask()5.5 Medium
- openatom openharmonyLiteos-A has an integer overflow vulnerability3.3 Low
- qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6800 firmware +88 more +90 moreInteger Overflow or Wraparound in Display8.4 High
- libexpat expat, libexpat project libexpat, siemens ruggedcom rst2428p +5 more +7 moreAn issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an...9.8 Critical
- libexpat expat, libexpat project libexpat, siemens ruggedcom rst2428p +5 more +7 moreAn issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer...9.8 Critical
- libexpat project libexpat, siemens ruggedcom rst2428p, scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family +4 more +6 moreAn issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length...7.5 High
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moretracing: Fix overflow in get_free_elt()5.5 Medium
- linux, linux kernel +1 moreCDC-NCM: avoid overflow in sanity checking5.5 Medium
- newlib project newlibAn issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling...9.8 Critical
- linux, linux kernel +1 morebpf: fix overflow check in adjust_jmp_off()5.5 Medium
- xpdfInteger overflow and divide-by-zero in Xpdf 4.05 due to bogus page box coordinates2.1 Low
- adobe indesign, indesign desktop +1 moreAdobe InDesign (Beta) has an integer overflow vulnerability when parsing SVG file7.8 High
- No product listedInteger overflow in firmware for some Intel(R) CSME may allow an unauthenticated user to...5.3 Medium
- adobe incopyAdobe InCopy has an integer overflow vulnerability when parsing SVG file7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreKernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability8.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +122 more +124 moreInteger Overflow or Wraparound in Automotive GPU8.4 High
- google androidIn attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a possible...7.8 High
- qualcomm ar8035 firmware, csr8811 firmware, fastconnect 6700 firmware +179 more +181 moreInteger Overflow or Wraparound in WLAN Host7.5 High
- google android, imaginationtech powervr-gpu +1 moreIn _MMU_AllocLevel of mmu_common.c, there is a possible arbitrary code execution due to an...7.8 High
- dell bsafe crypto-c micro edition, bsafe micro edition suite, bsafe crypto-c-micro-edition +1 more +3 moreDell BSAFE Crypto-C Micro Edition 4.1.5 and Dell BSAFE Micro Edition Suite, versions 4.0 through...6.2 Medium
- Show moreLoading…