CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- molotovcherry android-imagemagick7Integer Overflow or Wraparound in MolotovCherry Android-ImageMagick75.5 Medium
- insightsoftwareconsortium itkInteger overflow vulnerabilities in InsightSoftwareConsortium/ITK9.4 Critical
- artraweditor artAn Integer Overflow Vulnerability in artraweditor/ART8.5 High
- google chromeInteger overflow in Fonts in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to...8.8 High
- ggml llama.cppllama.cpp has a Heap Buffer Overflow via Integer Overflow in GGUF Tensor Parsing7.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions, integer overflow in the Graphics component7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component8.6 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component10.0 Critical
- jkuhlmann cgltfjkuhlmann / cgltf <= 1.15 Sparse Accessor Validation Integer Overflow6.9 Medium
- google chromeInteger overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in Dawn in Google Chrome on Mac prior to 146.0.7680.153 allowed a remote...4.3 Medium
- google chromeInteger overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.153 allowed a remote...8.8 High
- bitcoin coreBitcoin Core 0.13.0 through 29.x has an integer overflow.7.5 High
- bcrypt-rubybcrypt-ruby has an Integer Overflow that Causes Zero Key-Strengthening Iterations at Cost=31 on JRuby4.5 Medium
- htslibHTSlib BGZF index file reader has a heap buffer overflow7.1 High
- ultrajson, red hat openstack platform 16.2, openstack platform 17.1 +1 more +3 moreUltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loop7.5 High
- libp2p rust-libp2p, protocol libp2p-gossipsub +1 morelibp2p-rust: Gossipsub PRUNE.backoff Duration Overflow8.7 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreRDMA/umad: Reject negative data_len in ib_umad_write7.8 High
- netskope endpoint dlp module for netskope clientEndpoint DLP Driver DLL6.7 Medium
- netskope endpoint dlp module for netskope clientEndpoint DLP Driver Filter Communication Port Integer Overflow6.8 Medium
- filebrowserFile Browser TUS Negative Upload-Length Fires Post-Upload Hooks Prematurely5.3 Medium
- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreGStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability7.8 High
- protocol yamux, libp2p rust-yamux +1 moreYamux remote Panic via malformed WindowUpdate credit8.7 High
- freerdpFreeRDP has an Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP's Core Library3.1 Low
- capnprotoCap'n Proto has an integer overflow in KJ-HTTP6.3 Medium
- ggml llama.cppllama.cpp has a Heap Buffer Overflow via Integer Overflow in `mem_size` Calculation — Bypass of CVE-2025-53630 Fix7.8 High
- google chromeInteger overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to...8.8 High
- adobe dng software development kit (sdk), dng software development kit +1 moreDNG SDK | Integer Overflow or Wraparound (CWE-190)5.5 Medium
- microsoft 365 copilot, office for android +1 moreMicrosoft Office Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +19 more +21 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.0 High
- imagemagickImageMagick has a heap buffer overflow in WriteXWDImage due to CARD32 arithmetic overflow in bytes_per_line calculation6.8 Medium
- imagemagickImageMagick has a heap Buffer Over-Read in BilateralBlurImage4.4 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick has an integer overflow in DIB coder can result in out of bounds read or write8.1 High
- imagemagickImageMagick has a Integer Overflow leading to out of bounds write in SIXEL decoder6.5 Medium
- mrnanko webp4jMrNanko webp4j gif_decoder.c DecodeGifFromMemory integer overflow4.8 Medium
- iamb crypt::sodium::xs, crypt\ +1 moreCrypt::Sodium::XS versions through 0.001000 for Perl has potential integer overflows7.5 High
- timlegge crypt::nacl::sodium, crypt\ +1 moreCrypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflows9.8 Critical
- maximmasiutin tinywebTinyWeb: Integer Overflow in `_Val` (HTTP Request Smuggling)9.3 Critical
neqo-qpackcrates.ioneqo-qpack has iInteger overflow in qpack dynamic table indexing5.1 Medium- google chromeInteger overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to...8.8 High
- cisco adaptive security appliance software, secure firewall adaptive security appliance (asa) software, secure firewall threat defense (ftd) software +1 more +3 moreA vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD...6.8 Medium
- apache activemq, apache software foundation activemq all module, activemq mqtt module +2 moreApache ActiveMQ, Apache ActiveMQ All Module, Apache ActiveMQ MQTT Module: MQTT control packet remaining length field is not properly validated5.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: virtio-snd: integer overflow leading to unbounded memory allocation5.5 Medium
- academysoftwarefoundation openexr, red hat ai inference server 3.3, enterprise linux 10 +17 more +19 moreOpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB write8.4 High
- qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +236 more +238 moreInteger Overflow or Wraparound in Graphics7.8 High
- google androidIn multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer...8.4 High
- google androidIn __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an...8.4 High
- bigcat88 pillow-heif, pillow heif +1 morepillow_heif Has Integer Overflow in Encode Path Buffer Validation that Leads to Heap Out-of-Bounds Read5.5 Medium
- Show moreLoading…