CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows SMB Client Elevation of Privilege Vulnerability7.8 High
- libarchive, red hat cert-manager operator for red hat openshift 1.16, openshift compliance operator 1 +35 more +37 moreLibarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c7.8 High
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: integer overflow while reading warc files at archive_read_support_format_warc.c3.9 Low
- gimpGIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- catdoc, debian linux +1 moreAn integer overflow vulnerability exists in the OLE Document File Allocation Table Parser...8.4 High
- wago fully managed switches 0852-0303, fully managed switches 0852-1305, fully managed switches 0852-1305/0000-0001 +10 more +12 moreWAGO: Switches affected by year 2k38 problem4.3 Medium
- fortinet fortiosA integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0...4.8 Medium
- jqlang jqjq has signed integer overflow in jv.c:jvp_array_write4.3 Medium
- gnu psppGNU PSPP pspp-convert.c calloc integer overflow4.8 Medium
- linux, linux kernel +1 morecrypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()7.0 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +12 more +14 moreLibsoup: integer overflow in cookie expiration date handling in libsoup3.7 Low
- mongodb bson::xsBSON::XS versions 0.8.4 and earlier for Perl includes a bundled libbson 1.1.7, which has several vulnerabilities9.8 Critical
- ether fcgiFCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library5.3 Medium
- aomedia libavifIn libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications...4.5 Medium
- aomedia libavifIn libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer...4.5 Medium
github.com/babylonlabs-io/babylonGoBabylon Integer Overflow in Distribution Module CumulativeRewardRatio Calculation Leading to Chain Halt8.2 High- nbdkit project nbdkit, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreNbd: nbdkit: integer overflow triggers an assertion resulting in denial of service6.5 Medium
- adobe bridgeBridge | Integer Overflow or Wraparound (CWE-190)7.8 High
- adobe animateAnimate | Integer Overflow or Wraparound (CWE-190)7.8 High
- adobe photoshop, photoshop desktop +1 morePhotoshop Desktop | Integer Overflow or Wraparound (CWE-190)7.8 High
- apple ipados, macos, tvos +4 more +6 moreAn integer overflow was addressed with improved input validation. This issue is fixed in watchOS...7.5 High
- debian linux, linux kernel +1 morefs/jfs: Prevent integer overflow in AG size calculation5.5 Medium
- debian linux, linux kernel +1 morescsi: st: Fix array overflow in st_setup()5.5 Medium
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, sdm429w firmware +12 more +14 moreInteger Overflow or Wraparound in Camera Driver7.8 High
- iputilsping in iputils through 20240905 allows a denial of service (application error or incorrect data...6.5 Medium
- tesla model 3, model 3 firmware +1 moreTesla Model 3 VCSEC Integer Overflow Remote Code Execution Vulnerability7.5 High
- apple ipados, macos, tvos +4 more +6 moreAn integer overflow was addressed with improved input validation. This issue is fixed in macOS...6.5 Medium
- vancluever z2dz2d OOB composition could lead to invalid memory access and corruption7.3 High
- gimpGIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- linux, linux kernel +1 moreRDMA/mlx5: Fix page_size variable overflow5.5 Medium
- linux, linux kernel +1 morefs/ntfs3: Fix a couple integer overflows on 32bit systems7.8 High
- linux, linux kernel +1 morefs/ntfs3: Prevent integer overflow in hdr_first_de()8.4 High
- linux, linux kernel +1 moreudp: Fix multiple wraparounds of sk->sk_rmem_alloc.7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: fix geneve_opt length integer overflow7.1 High
- linux, linux kernel +1 moreksmbd: fix overflow in dacloffset bounds check8.8 High
- wago cc100 0751-9x01, pfc100 g1 0750-810x/xxxx-xxxx, pfc100 g2 0750-811x-xxxx-xxxx +9 more +11 moreWAGO: Year 2038 problem6.5 Medium
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...8.1 High
- sqlite, siemens ruggedcom crossbow station access controller (sac), simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreAn integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated...6.9 Medium
- dell powerscale onefsDell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.1, contains an integer overflow or...6.5 Medium
- sqlite, siemens ruggedcom crossbow station access controller (sac), simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreAn issue in sqlite v.3.49.0 allows an attacker to cause a denial of service via the...5.6 Medium
- microsoft office, 365 apps, access +15 more +17 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h2 +13 more +15 moreWindows USB Print Driver Elevation of Privilege Vulnerability7.8 High
- nothings stb, stb image.h +1 moreNothings stb stb_dupreplace integer overflow5.3 Medium
- apollographql routerApollo Router Operation Limits Vulnerable to Bypass via Integer Overflow7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +22 more +24 moreGlibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().3.7 Low
- openatom openharmonyLiteos_A has an integer overflow vulnerability6.5 Medium
- sqlite, siemens ruggedcom crossbow station access controller (sac), simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreSqlite 3.49.0 is susceptible to integer overflow through the concat function.3.2 Low
- freedesktop popplerA floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an...4.0 Medium
- linux, linux kernel +1 moreaccel/qaic: Fix integer overflow in qaic_validate_req()7.8 High
- linux, linux kernel +1 morexsk: fix an integer overflow in xp_create_and_assign_umem()5.5 Medium
- Show moreLoading…