CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- red hat lightspeed core, ai inference server, enterprise linux ai (rhel ai) 3 +1 more +3 moreFfmpeg: ffmpeg: denial of service and potential arbitrary code execution via signed integer overflow in dvd subtitle parser6.5 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: heap buffer overflow due to integer overflow in fits image loader5.5 Medium
- saitoha libsixellibsixel: Integer Overflow in write_png_to_file() leads to Heap-based Buffer Overflow7.1 High
- saitoha libsixellibsixel: Integer overflow leads to Out-of-bounds Read in img2sixel7.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8 High
- fortinet fortiwebA integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb...4.4 Medium
- imagemagickImageMagick: Integer overflow in despeckle operation causes heap buffer overflow on 32-bit builds5.1 Medium
- imagemagickImageMagick has a Heap overflow caused by integer overflow/wraparound in viff encoder on 32-bit builds5.9 Medium
- jqlang jqjq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflow8.2 High
- uclouvain openjpeguclouvain openjpeg pi.c opj_pi_initialise_encode integer overflow4.8 Medium
- samsung escargotInteger overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined...5.1 Medium
- samsung escargotInteger overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue...8.1 High
- libexif project libexifIn libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could...4.0 Medium
- linux, linux kernel +1 moreusb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks()5.5 Medium
- wolfsslPrefix-substitution forgery via integer overflow in wolfCrypt CMAC8.2 High
- mtrojnar osslsigncodeosslsigncode has an Integer Underflow in PE Page Hash Calculation Can Cause Out-of-Bounds Read5.5 Medium
- apache software foundation activemq, activemq all, activemq mqtt +2 moreApache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT: Missing fix for CVE-2025-66168: MQTT control packet remaining length field is not properly validated7.5 High
- google chromeInteger overflow in Skia in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to...8.8 High
- nvidia triton inference serverNVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server...7.5 High
- libraw, red hat enterprise linux 6, enterprise linux 7 +9 more +11 moreA heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw...9.8 Critical
- libraw, red hat enterprise linux 6, enterprise linux 7 +9 more +11 moreA heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw...8.1 High
- librawAn integer overflow vulnerability exists in the uncompressed_fp_dng_load_raw functionality of...8.1 High
- librawAn integer overflow vulnerability exists in the deflate_dng_load_raw functionality of LibRaw...8.1 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +19 more +21 moreIncorrect boundary conditions, integer overflow in the Graphics: Text component8.8 High
- mediatek mt6813 firmware, mediatek, inc. mediatek chipset +1 moreIn sec boot, there is a possible out of bounds write due to an integer overflow. This could lead...4.3 Medium
- qualcomm 5g fixed wireless access platform firmware, ar8035 firmware, csra6620 firmware +152 more +154 moreInteger Overflow or Wraparound in GPS8.8 High
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreOpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write8.4 High
- academysoftwarefoundation openexr, red hat ai inference server 3.3, enterprise linux 10 +9 more +11 moreOpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write8.6 High
- academysoftwarefoundation openexrOpenEXR has a signed integer overflow (undefined behavior) in undo_pxr24_impl may allow bounds-check bypass in PXR24 decompression5.9 Medium
- academysoftwarefoundation openexrOpenEXR has a signed integer overflow in generic_unpack() when parsing EXR files with crafted negative dataWindow.min.x6.5 Medium
- nasa cfs, core flight system +1 moreNASA cFS cfe_tbl_passthru_codec.c CFE_TBL_ValidateCodecLoadSize integer overflow2.1 Low
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()8.6 High
- apple macosAn integer overflow was addressed with improved input validation. This issue is fixed in macOS...6.2 Medium
- academysoftwarefoundation openexrOpenEXR: integer overflow to OOB write in uncompress_b44_impl()8.4 High
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreOpenEXR: integer overflow lead to OOB in HTJ2K decoder8.4 High
- corosync, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreCorosync: corosync: denial of service via integer overflow in join message validation7.5 High
- artifex mupdfCVE-2026-33087.8 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS6.5 Medium
- libarchive, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +36 more +38 moreLibarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing7.5 High
- tinyproxytinyproxy Integer Overflow in HTTP Chunked Transfer-Encoding Parser Leading to Denial of Service8.7 High
- dloebl cgifdloebl CGIF GIF Image cgif.c cgif_addframe integer overflow5.3 Medium
- protocol libp2p-gossipsub, libp2p rust-libp2p +1 morelibp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant Overflow8.2 High
- ocamlIn OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of...5.9 Medium
- linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 moreNATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead7.5 High
- gimp, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreGIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreGIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- apple macosAn integer overflow was addressed with improved input validation. This issue is fixed in macOS...7.5 High
- libtiff, debian linux, red hat ai inference server 3.2 +30 more +32 moreLibtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing7.8 High
- f5 nginx open source, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 moreNGINX ngx_http_mp4_module vulnerability8.5 High
- Show moreLoading…