CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- ashlar cobaltAshlar-Vellum Cobalt XE File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- x.org x server, debian linux, ibm aix +25 more +27 moreXorg: xmayland: value overflow in xkbsetcompatmap()7.3 High
- veeder-root tls4b automatic tank gauge systemInteger Overflow or Wraparound in Veeder-Root TLS4B Automatic Tank Gauge System7.1 High
:unknown:AndroidAn issue was discovered in Dolby UDC 4.5 through 4.13. A crash of the DD+ decoder process can...9.8 Critical- imagemagickImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systems5.9 Medium
- quickjsInteger overflow in js_bigint_from_string in QuickJS7.1 High
- linux, linux kernel +1 morefbcon: fix integer overflow in fbcon_do_set_font7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Integer Overflow or Wraparound (CWE-190)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Integer Overflow or Wraparound (CWE-190)7.8 High
- adobe dimensionDimension | Integer Overflow or Wraparound (CWE-190)7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Speech Runtime Elevation of Privilege Vulnerability8.8 High
- google android, mediatek, inc. mt6835, mt6878, mt6886, mt6897, mt6899, mt6980d, mt6985, mt6989, mt6990, mt6991, mt8676, mt8678, mt8775, mt8791t, mt8796, mt8873, openwrt +1 more +3 moreIn gnss driver, there is a possible out of bounds read due to an integer overflow. This could...5.5 Medium
- mediatek software development kit, mediatek, inc. mt6890, mt7915, mt7916, mt7981, mt7986, openwrt +2 moreIn wlan AP driver, there is a possible out of bounds write due to an integer overflow. This could...8.8 High
- qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +26 more +28 moreInteger Overflow or Wraparound in DSP Service7.8 High
- linux, linux kernel +1 moredm-stripe: fix a possible integer overflow5.5 Medium
- redisRedis is vulnerable to DoS via specially crafted LUA scripts6.3 Medium
- redisLua library commands may lead to integer overflow and potential RCE7.0 High
- linux, linux kernel +1 morex86/MCE/AMD: Use an u64 for bank_map7.8 High
- mozilla firefoxSandbox escape due to integer overflow in the Graphics: Canvas2D component8.6 High
- filecoin go-f3go-f3 module vulnerable to integer overflow leading to panic7.5 High
- cesanta mongooseAn integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By...7.5 High
- gimpGIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- gimpGIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- linuxfoundation pytorchpytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-...5.3 Medium
- linuxfoundation pytorchpytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and...7.5 High
- google chromeInteger overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to...8.8 High
- artifex ghostscriptIn Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer...4.3 Medium
- zephyrproject zephyrBluetooth: Semi-Arbitrary ability to make the BLE Target send disconnection requests7.1 High
- dover fueling solutions progauge maglink lx 4, progauge maglink lx plus, progauge maglink lx ultimate +2 moreDover Fueling Solutions ProGauge MagLink LX4 Devices Integer Overflow or Wraparound8.8 High
- linux, linux kernel +1 moremedia: atomisp: prevent integer overflow in sh_css_set_black_frame()7.8 High
- ashlar cobaltAshlar-Vellum Cobalt VC6 File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt LI File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- bytecodealliance webassembly micro runtime, wasm-micro-runtime +1 moreWAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT mode2.1 Low
- mozilla firefox, thunderbird +1 moreInteger overflow in the SVG component8.8 High
- linux, linux kernel +1 morecrypto: cavium - prevent integer overflow loading firmware7.1 High
- adobe substance3d - modeler, substance 3d modeler +1 moreSubstance3D - Modeler | Integer Overflow or Wraparound (CWE-190)7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Hyper-V Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreSPNEGO Extended Negotiation (NEGOEX) Security Mechanism Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Kernel Elevation of Privilege Vulnerability8.8 High
- microsoft windows server 2012 r2, windows server 2012 r2 (server core installation), windows server 2016 +9 more +11 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- sqlite fts5Out Of Bounds write in FTS5 Extension in SQLite6.9 Medium
- microsoft .net 6.0, microsoft.netcore.app.runtime.linux-arm, microsoft.netcore.app.runtime.linux-arm64 +10 more +12 moreEOL .NET 6.0 Runtime Remote Code Execution Vulnerability7.5 High
- amd radeon™ pro v710 graphics products, radeon™ pro w7000 series graphics products, radeon™ rx 7000 series graphics products +2 moreAn integer overflow in the SMU could allow a privileged attacker to potentially write memory...3.9 Low
- amd athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ pro v620 graphics products, radeon™ pro w6000 series graphics products +13 more +15 moreFailure to validate the address and size in TEE (Trusted Execution Environment) may allow a...3.0 Low
- amd athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ instinct™ mi25 graphics products, radeon™ pro v520 graphics products +22 more +24 moreInsufficient parameter validation while allocating process space in the Trusted OS (TOS) may...4.1 Medium
- google androidIn lwis_test_register_io of lwis_device_test.c, there is a possible OOB Write due to an integer...6.7 Medium
mupen64plusopenSUSE,mupen64plus-coreDebian +1 moreMupen64Plus is_viewer.c write_is_viewer integer overflow2.3 Low- imagemagickImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow7.5 High
- libbiosig project libbiosigAn integer overflow vulnerability exists in the ABF parsing functionality of The Biosig Project...9.8 Critical
- libbiosig project libbiosigAn integer overflow vulnerability exists in the GDF parsing functionality of The Biosig Project...9.8 Critical
- Show moreLoading…