CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser6.0 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: fs/bfs: integer overflow in the bfs parser.4.1 Medium
- denx u-boot, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 moreInteger overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted...7.1 High
- denx u-boot, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 moreAn integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc ...7.1 High
- denx u-bootAn integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted...7.1 High
- denx u-bootAn integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink...7.1 High
- lexmark international cx, xc, cs, et. al.Access of Resource Using Incompatible Type in Postscript interpreter7.3 High
- mercedes-benz headunit ntg6 mercedes-benz user experienceAn issue was discovered on Mercedes Benz NTG 6. A possible integer overflow exists in the user...3.3 Low
- mercedes-benz headunit ntg6 mercedes-benz user experienceMercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB....9.8 Critical
- nvidia triton inference serverNVIDIA Triton Inference Server contains a vulnerability in the model loading API, where a user...4.9 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, ryzen™ 4000 series desktop processor with radeon™ graphics, ryzen™ 4000 series mobile processors with radeon™ graphics +12 more +14 moreAn integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds...2.3 Low
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreMicrosoft Digest Authentication Remote Code Execution Vulnerability8.8 High
- openatom openharmonyLiteos_a has an integer overflow read vulnerability5.5 Medium
- kaspersky anti-ransomware tool, anti-virus, anti-virus sdk for windows +8 more +10 moreKaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security...5.3 Medium
- mit kerberos 5In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer...7.1 High
- google androidIn HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to...5.7 Medium
- apple macosAn integer overflow was addressed through improved input validation. This issue is fixed in macOS...7.8 High
- linux, linux kernel +1 morenet/sctp: Prevent autoclose integer overflow in sctp_association_init()5.5 Medium
- linux, linux kernel +1 moreRDMA/uverbs: Prevent integer overflow issue5.5 Medium
- microsoft office for android, office for ios, office for mac +40 more +42 moreGDI+ Remote Code Execution Vulnerability7.8 High
- microsoft .net, .net 8.0, .net 9.0 +10 more +12 more.NET and Visual Studio Remote Code Execution Vulnerability7.5 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Graphics Component Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- fortinet fortiosAn Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2...3.2 Low
- linux, linux kernel +1 morering-buffer: Fix overflow in __rb_map_vma7.1 High
- freetypeFreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c.4.0 Medium
- fastcgi fcgiFastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based...9.3 Critical
- sonicwall sonicosAn Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker...9.8 Critical
- redisbloomRedisBloom Integer Overflow Remote Code Execution Vulnerability8.8 High
- redisearchRediSearch Integer Overflow with LIMIT or KNN arguments can lead to RCE7.0 High
- redistimeseriesRedisTimeSeries Integer Overflow Remote Code Execution Vulnerability7.0 High
- huawei harmonyosInteger overflow vulnerability during glTF model loading in the 3D engine module Impact:...7.3 High
- qualcomm msm8996au firmware, qam8255p firmware, qam8295p firmware +39 more +41 moreInteger Overflow to Buffer Overflow in Automotive OS Platform8.4 High
- ffmpegFFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an...6.2 Medium
- linux, linux kernel +1 moreio_uring: check for overflows in io_pin_pages5.5 Medium
- No product listedInteger overflow vulnerability exists in SimplCommerce at commit...9.8 Critical
- dell ecs, elastic cloud storage +1 moreDell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in...8.1 High
- linux, linux kernel +1 moreEDAC/bluefield: Fix potential integer overflow5.5 Medium
- linux, linux kernel +1 moresvcrdma: Address an integer overflow7.5 High
- linux, linux kernel +1 moreNFSD: Prevent a potential integer overflow9.1 Critical
- linux, linux kernel +1 moreum: Fix potential integer overflow during physmem setup5.5 Medium
- rti connext professionalBuffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in RTI Connext Professional (Security Plugins) allows O…6.9 Medium
- gstreamer, debian linux +1 moreGHSL-2024-166: GStreamer Integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes8.6 High
- gstreamerGHSL-2024-094: GStreamer has an OOB-write in isomp4/qtdemux.c8.6 High
- adobe animateAnimate | Integer Overflow or Wraparound (CWE-190)7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Mobile Broadband Driver Elevation of Privilege Vulnerability6.8 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability7.2 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +16 more +18 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- Show moreLoading…