CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- libvipslibvips extract.c vips_extract_area_build integer overflow4.8 Medium
- psd-toolspsd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gaps6.8 Medium
- freerdpFreeRDP has possible Integer overflow in Stream_EnsureCapacity5.3 Medium
- imagemagickImageMagick - Heap Out-of-Bounds Read in PSB RLE Decoding6.3 Medium
- color iccdeviccDEV has SIO in parse3DTable() at iccFromCube.cpp Line 2186.2 Medium
- imagemagickImageMagick has integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder7.5 High
- imagemagickImageMagick SIXEL Decoder Has Signed Integer Overflow, Leading to Memory Corruption5.3 Medium
- imagemagickImageMagick has heap overflow in sun decoder on 32-bit systems that can result in out of bounds write6.5 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 +2 moreImageMagick has heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions8.2 High
- mozilla firefox, thunderbird +1 moreInteger overflow in the Libraries component in NSS9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreInteger overflow in the Audio/Video component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreInteger overflow in the JavaScript: Standard Library component9.8 Critical
- timlegge crypt::nacl::sodium, crypt\ +1 moreCrypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems9.1 Critical
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: memory corruption due to integer overflow in ico file handling4.3 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: denial of service via crafted psp image file3.3 Low
- silabs.com silicon labs matterInteger Wraparound DoS in Silicon Labs Matter Implementation6.0 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ pro vii, radeon™ pro w5000 series graphics products +34 more +36 moreInteger Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write...7.0 High
- amd radeon™ pro v520, radeon™ pro v620, radeon™ pro v710 +14 more +16 moreThe integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass...5.5 Medium
- amd ryzen™ 4000 series desktop processors, ryzen™ 4000 series mobile processors with radeon™ graphics, ryzen™ 5000 series desktop processors with radeon™ graphics +3 more +5 moreInsufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an...5.4 Medium
- adobe dng software development kit (sdk), dng software development kit +1 moreDNG SDK | Integer Overflow or Wraparound (CWE-190)5.5 Medium
- adobe dng software development kit (sdk), dng software development kit +1 moreDNG SDK | Integer Overflow or Wraparound (CWE-190)7.8 High
- adobe bridgeBridge | Integer Overflow or Wraparound (CWE-190)7.8 High
- adobe after effectsAfter Effects | Integer Overflow or Wraparound (CWE-190)7.8 High
- linux, linux kernel +1 moreirqchip/gic-v3-its: Avoid truncating memory addresses5.5 Medium
- linux, linux kernel +1 morevsock/virtio: fix potential underflow in virtio_transport_get_credit()5.5 Medium
hpke-rscrates.io,hpke-rs-rust-cryptocrates.io +1 moreBug fixes in hpke-rs, hpke-rs-rust-crypto8.2 High- eprosima fast-dds, fast dds, debian linux +2 moreFastDDS has Out-of-memory in readOctetVector via Manipulated DATA Submessage when DDS Security is enabled1.7 Low
- eprosima fast-dds, fast dds, debian linux +2 moreeprosima Fast DDS affected by Out-of-Memory in readBinaryPropertySeq via Manipulated DATA Submessage when DDS Security is enabled8.6 High
- eprosima fast-dds, fast dds, debian linux +2 moreeprosima Fast DDS affected by Out-of-Memory in readPropertySeq via Manipulated DATA Submessage when DDS Security is enabled8.6 High
- qualcomm qam8255p firmware, qam8295p firmware, qam8620p firmware +33 more +35 moreInteger Overflow or Wraparound in Automotive6.8 Medium
- qualcomm qam8255p firmware, qam8295p firmware, qam8620p firmware +33 more +35 moreInteger Overflow or Wraparound in Automotive6.8 Medium
- libexpat project libexpat, siemens ruggedcom rst2428p (6gk6242-6pa00), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreIn libexpat before 2.7.4, the doContent function does not properly determine the buffer size...6.9 Medium
- stellar rs-soroban-sdksoroban-sdk has overflow in Bytes::slice, Vec::slice, GenRange::gen_range for u645.3 Medium
- nvidia geforce, guest driver, rtx pro, rtx, quadro +2 more +4 moreNVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an...7.8 High
- nvidia geforce, guest driver, rtx pro, rtx, quadro +1 more +3 moreNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm...7.8 High
- yoyofr modizerInteger overflow in modizer7.8 High
- beckhoff automation beckhoff.device.manager.xar, mdp for beckhoff rt linux(r), mdp software package for twincat/bsd +2 moreBeckhoff: Arbitrary code execution within privileged processes8.8 High
- ralim ironosInteger Overflow or Wraparound in IronOS9.8 Critical
- swoole swoole-srcA integer overflow in swoole/swoole-src10.0 Critical
- rawtherapeeA possible integer overflow vulnerability in RawTherapee/RawTherapee8.3 High
- muntashirakon appmanagerA possible integer overflow vulnerability in RawTherapee/RawTherapee4.6 Medium
- color iccdeviccDEV Undefined Behavior in CIccProfile::CheckHeader() Leads to Integer Overflow7.1 High
- docopt docopt.cppA signed integer overflow in docopt.cpp v0.6.2 (LeafPattern::match in docopt_private.h) when...4.4 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreHeap buffer overflow with attacker-controlled data in XBM parser8.1 High
- esphomeESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API component1.7 Low
- raylibraysan5 raylib rtext.c LoadFontData integer overflow4.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreGlib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()3.7 Low
- gnu glibcInteger overflow in memalign leads to heap corruption8.4 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +15 more +17 moreVsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing6.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()7.5 High
- Show moreLoading…