CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- linuxiomap: adjust read range correctly for non-block-aligned positions9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to integer overflow in the Graphics component8.8 High
- libpngLIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*6.8 Medium
- color iccdeviccDEV has Type Confusion in CIccProfileXml::ParseBasic() at IccXML/IccLibXML/IccProfileXml.cpp6.5 Medium
- color iccdeviccDEV has Type Confusion in SIccCalcOp::ArgsPushed() at IccProfLib/IccMpeCalc.cpp8.8 High
- color iccdevUse After Free and Heap-based Buffer Overflow and Integer Overflow or Wraparound and Out-of-bounds Write in iccDEV7.8 High
- color iccdeviccDEV Undefined Behavior (UB) and Out of Memory in CIccProfile::LoadTag()8.8 High
- google android, mediatek, inc. mediatek chipset +1 moreIn dpe, there is a possible out of bounds write due to an integer overflow. This could lead to...6.7 Medium
- google android, mediatek, inc. mediatek chipset +1 moreIn dpe, there is a possible memory corruption due to an integer overflow. This could lead to...6.7 Medium
- color iccdeviccDEV has Integer Overflow/Underflow in CIccXmlArrayType::ParseTextCountNum()7.8 High
- openzeppelin openzeppelin-confidential-contractsOpenZeppelin Confidential Contracts ERC7984ERC20Wrapper: once a wrapper is filled, subsequent wrap requests do not revert and result in loss of funds.6.6 Medium
- fontforgeFontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- linuxfoundation wasmedgeWasmEdge integer wrap in MemoryInstance::getSpan()'s memory size check5.5 Medium
- imagemagickImageMagick converting a malicious MVG file to SVG caused an integer overflow.5.3 Medium
- struktur libheiflibheif has Potential Heap Buffer Over-Read6.5 Medium
- gimpGIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- nsf unidata netcdf-c, unidata netcdf +1 moreNSF Unidata NetCDF-C NC Variable Integer Overflow Remote Code Execution Vulnerability7.8 High
- objectcomputing openddsAn integer overflow in the RTPS protocol implementation of OpenDDS DDS before v3.33.0 allows...7.5 High
- eprosima fast ddsAn integer overflow in eProsima Fast-DDS v3.3 allows attackers to cause a Denial of Service (DoS)...7.5 High
- tp-link systems inc. tapo c200 v3, tp-link tapo c200 firmware +1 moreImproper Content-Length Validation in HTTPS Requests on Tapo C2007.1 High
- phpHeap buffer overflow in array_merge()6.5 Medium
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader PDF Parsing Heap-Based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +176 more +178 moreInteger Overflow or Wraparound in Audio7.8 High
- zephyrproject-rtos zephyrBluetooth: Integer Overflow in Bluetooth Classic (BR/EDR) L2CAP6.5 Medium
- apple macos, tvos, visionos +2 more +4 moreAn integer overflow was addressed by adopting 64-bit timestamps. This issue is fixed in macOS...7.8 High
- malwarebytesMalwarebytes 1.0.14 for Linux doesn't properly compute signatures in some scenarios. This allows...3.3 Low
- sandboxie-plus sandboxieSandboxie's Integer Overflow in SbieIniServer::RC4Crypt allows sandbox escape and SYSTEM compromise9.9 Critical
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +27 more +29 moreGlib: integer overflow in glib gio attribute escaping causes heap buffer overflow6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +26 more +28 moreGlib: glib: buffer underflow in gvariant parser leads to heap corruption5.6 Medium
- freeimage project freeimageAn integer overflow in the psdParser::ReadImageData function of FreeImage v3.18.0 and before...6.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Projected File System Elevation of Privilege Vulnerability7.8 High
- adobe dng sdk, dng software development kit +1 moreDNG SDK | Integer Overflow or Wraparound (CWE-190)5.5 Medium
- adobe dng sdk, dng software development kit +1 moreDNG SDK | Integer Overflow or Wraparound (CWE-190)7.8 High
- robocodeInteger Overflow in Robocode's Buffer Write Method10.0 Critical
- ffmpegInteger overflow vulnerability in the yuv2ya16_X_c_template function in libswscale/output.c in...7.5 High
- apache http serverApache HTTP Server: mod_md (ACME), unintended retry intervals7.5 High
- mborgerding/kissfftKissFFT Integer Overflow Heap Buffer Overflow via kiss_fft_alloc8.6 High
- avast antivirusInteger Overflow in Avast Antiviurs 25.1.981.6 on Windows may result in privilege escalation9.0 Critical
- google androidIn multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer...7.8 High
- google androidIn GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to...7.8 High
- gnome glib, red hat ceph storage 8, discovery 2 +58 more +60 moreGlib: integer overflow in in g_escape_uri_string()7.7 High
- tinyproxy project tinyproxyTinyproxy through 1.11.2 contains an integer overflow vulnerability in the strip_return_port()...6.5 Medium
- the webkitgtk team webkitgtk, red hat enterprise linux 6, enterprise linux 7 +15 more +17 moreWebkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos7.5 High
- amd xilinx run time (xrt)Improper input validation within the XOCL driver may allow a local attacker to generate an...8.0 High
- amd xilinx run time (xrt)Improper input validation within the XOCL driver may allow a local attacker to generate an...7.3 High
- eprosima fast ddseProsima Fast-DDS v3.3 and before has an infinite loop vulnerability caused by integer overflow...7.5 High
libpqAlmaLinux,postgresqlAlmaLinux,libpq-debuginfoRed Hat +83 more +85 morePostgreSQL libpq undersizes allocations, via integer wraparound5.9 Medium- anydeskAn issue was discovered in AnyDesk before 9.0.0. It has an integer overflow and resultant heap...9.8 Critical
- qualcomm qam8255p firmware, qam8295p firmware, qam8620p firmware +33 more +35 moreInteger Overflow or Wraparound in Automotive Platform7.8 High
- opera norway as gamemaker ideInteger overflow in GameMaker IDE below 2024.14.0 version can lead to can lead to application...7.5 High
- Show moreLoading…