CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- python pillowPillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow)8.6 High
- python pillowPillow: Integer overflow when processing fonts5.1 Medium
- greyclab cimgCImg Library: Integer overflow in PNM size check bypasses memory guard (_load_pnm)6.1 Medium
- libssh2, red hat enterprise linux 6, enterprise linux 7 +9 more +11 morelibssh2 userauth.c userauth_password integer overflow6.9 Medium
- linux, linux kernel +1 moreio_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs()7.1 High
imageproccrates.ioimageproc: integer overflow in kernel size check leads to out-of-bounds read6.9 Mediumimageproccrates.ioimageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling6.9 Mediumimageproccrates.ioimageproc has fragile bounds check when sampling from image6.9 Medium- linaro openampOpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image...8.4 High
- No product listedcollin80/Open-SAE-J1939 thru commit 744024d4306bc387857dfce439558336806acb06 (2023-03-08)...8.1 High
- frrouting frr, frrouting +1 moreFRRouting < 10.5.3 Integer Overflow in OSPF TLV Parser Functions6.0 Medium
- bytecodealliance wasmtime, red hat enterprise linux 10, hardened images +2 moreWasmtime: Panic when allocating a table exceeding the size of the host's address space5.9 Medium
- littlecms little cms color engineLittle CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.4.0 Medium
- libsndfile project libsndfile, red hat ai inference server 3.3, enterprise linux 10 +14 more +16 moreAn issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was...7.5 High
- apache thrift, red hat multicluster global hub 1.3.4, multicluster global hub 1.4.5 +12 more +14 moreApache Thrift: Swift Compact Protocol integer overflow7.3 High
- apache thrift, red hat multicluster global hub, multicluster global hub 1.3.4 +17 more +19 moreApache Thrift: Go TFramedTransport uint32 overflow7.5 High
- teluu pjsip, pjsip pjproject +1 morePJSIP: Asymmetric ptime integer overflow in Media Stream8.1 High
- nds-association zserioZserio: Integer Overflow in BitStreamReader on 32-bit platforms7.5 High
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE: RSASSA EMSA- PKCS1-v1_5 underflow in emsa_pkcs1_v1_5_encode()7.5 High
- becheran gridGrid: Integer Overflow in Grid::expand_rows Leads to Safe-API Undefined Behavior6.2 Medium
- linux, linux kernel +1 moretipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG7.5 High
- linux, linux kernel +1 morebatman-adv: reject oversized global TT response buffers9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: stmmac: fix integer underflow in chain mode9.8 Critical
- linux, linux kernel +1 moremm: filemap: fix nr_pages calculation overflow in filemap_map_pages()7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morerxrpc: Fix RxGK token loading to check bounds7.8 High
- linux, linux kernel +1 morerxrpc: Fix integer overflow in rxgk_verify_response()9.8 Critical
- azure go-ntlmsspgo-ntlmssp NTLM challenges can panic on malformed payloads5.3 Medium
- nimiq nimiq-block, proof-of-stake +1 morenimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation9.6 Critical
- powerdns authoritativeInsufficient validation of HTTPS and SVCB records6.5 Medium
- linux, linux kernel +1 morebpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN7.8 High
- linux, linux kernel +1 moreRDMA/irdma: Harden depth calculation functions5.5 Medium
- powerdns dnsdistTCP backend stream ID overflow3.1 Low
- samsung oneInteger overflow in constant tensor data size calculation in Samsung Open Source ONE could cause...6.6 Medium
- samsung oneInteger overflow in tensor copy size calculation in Samsung Open Source ONE could lead to out of...6.6 Medium
- samsung oneInteger overflow in scratch buffer initialization size calculation in Samsung Open Source ONE...6.1 Medium
- samsung oneInteger overflow in memory copy size calculation in Samsung Open Source ONE could lead to invalid...6.6 Medium
- samsung oneInteger overflow in output tensor copy size calculation in Samsung Open Source ONE could cause...6.6 Medium
- samsung oneInteger overflow in buffer size calculation could result in out of bounds memory access when...6.6 Medium
- samsung onePotential Integer overflow in tensor allocation size calculation could lead to insufficient...5.3 Medium
- nasa fprimeF´ (F Prime) has Integer Overflow in FileUplink0.0 None
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions, integer overflow in the Audio/Video: Playback component5.3 Medium
- mozilla firefox, thunderbird +1 moreDenial-of-service due to integer overflow in the Graphics: WebGPU component7.5 High
- nodejs node, node.js, red hat enterprise linux 10 +4 more +6 moreA flaw in Node.js WebCrypto implementation can crash the process if the input of `subtle.encrypt(...7.5 High
- academysoftwarefoundation openexrOpenEXR has integer overflow in DWA decoder outBufferEnd pointer arithmetic (missed variant of CVE-2026-34589)8.4 High
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreOpenEXR has integer overflow in DWA setupChannelData planarUncRle pointer arithmetic (missed variant of CVE-2026-34589)8.4 High
- academysoftwarefoundation openexrOpenEXR has HTJ2K Signed Integer Overflow in ht_undo_impl()5.3 Medium
- mborgerding kissfftKissFFT Integer Overflow Heap Buffer Overflow via kiss_fftndr_alloc()8.7 High
- littlecms little cms, little cms color engine +1 moreLittle CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the...4.0 Medium
- firebirdsql firebirdFirebird server hangs when using specific clumplet on batch creation6.0 Medium
- ffmpegFFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common...4.9 Medium
- Show moreLoading…