CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- kitty project kittyKitty has a Heap Buffer Over-Read/Write via Integer Overflow in compose_rectangles Bounds Check9.9 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morelib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()5.5 Medium
- openharmonykernel_liteos_a has an integer overflow vulnerability3.3 Low
- mozilla firefox, thunderbird +1 moreInteger overflow in the Networking: JAR component9.8 Critical
- mozilla firefox, thunderbird +1 moreInteger overflow in the Widget: Win32 component7.5 High
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI7.5 High
- netbsd srcNetBSD Signed Integer Overflow in cryptodev_op via cryptodev.c5.7 Medium
- hamba avro, red hat cryostat 4 on rhel 9, multicluster global hub 1.4.5 +11 more +13 moreiskorotkov/avro: Integer Overflow in Avro Decoder8.7 High
directxtk12_desktop_win10NuGet,directxtk12_uwpNuGet +1 moreMicrosoft DirectX12: .spritefont multiply overflow only in 32-bit builds6.9 Mediumdirectxtk_desktop_win10NuGet,directxtk_uwpNuGet +1 moreMicrosoft DirectX: .spritefont multiply overflow only in 32-bit builds6.9 Medium- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ instinct™ mi25 +25 more +27 moreA compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow ...1.8 Low
- cesnet libyang, red hat enterprise linux 10, enterprise linux 10.0 extended update support +11 more +13 morelibyang: lyb_read_string() integer overflow → heap buffer overflow7.5 High
- saitoha libsixellibsixel: integer overflow in parser7.1 High
- saitoha libsixellibsixel: integer overflow in encoder7.4 High
- academysoftwarefoundation openimageioOpenImageIO: JPEG2000 (OpenJPH) signed integer overflow in buffer allocation7.1 High
- academysoftwarefoundation openimageioOpenImageIO: Integer overflow in QueryRGBBufferSizeInternal leads to heap out-of-bounds write in DPX decoder (kCbYCr and kABGR)8.3 High
- academysoftwarefoundation openimageioOpenImageIO: Signed integer overflow in ConvertCbYCrYToRGB leads to heap out-of-bounds write in DPX 4:2:2 decoder8.8 High
- academysoftwarefoundation openimageioOpenImageIO: Signed integer overflow in SwapRGBABytes loop index leads to out-of-bounds read/write in DPX ABGR decoder8.8 High
- postgresql, red hat ansible automation platform 2.2, enterprise linux 10 +16 more +18 morePostgreSQL server undersizes allocations, via integer wraparound8.8 High
- simdjsonInteger overflow in simdjson6.9 Medium
- adobe c2pa, c2pa-web, content credentials js sdk +1 more +3 moreCAI Content Credentials | Integer Overflow or Wraparound (CWE-190)6.2 Medium
- adobe c2pa, c2pa-web, content credentials js sdk +1 more +3 moreCAI Content Credentials | Integer Overflow or Wraparound (CWE-190)6.2 Medium
- adobe after effectsAfter Effects | Integer Overflow or Wraparound (CWE-190)7.8 High
- adobe media encoderMedia Encoder | Integer Overflow or Wraparound (CWE-190)7.8 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows DWM Core Library Elevation of Privilege Vulnerability7.8 High
- microsoft .net, .net 10.0, .net 8.0 +11 more +13 more.NET Elevation of Privilege Vulnerability7.3 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +25 more +27 moreWindows Storage Spaces Controller Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Win32k Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWin32k Elevation of Privilege Vulnerability7.8 High
- No product listedInteger overflow in the UEFI firmware for the Slim Bootloader may allow an escalation of...8.7 High
- bareboxbarebox EFI PE Loader Memory Safety Vulnerabilities8.6 High
- cacalabs libcacalibcaca: Heap OOB write in canvas import functions caused by int overflow7.8 High
- apple ipados, macos, ios and ipados +1 more +3 moreAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7...7.5 High
- jqlang jqjq: Wild stack write via signed-integer overflow in decNumber D2U() macro6.2 Medium
- jqlang jqjq: Signed-int overflow in `stack_reallocate` (jq VM stack)6.4 Medium
bettercapopenSUSE,github.com/bettercap/bettercapGo,github.com/bettercap/bettercap/v2Go +1 more +3 morebettercap zerogod IPP Service zerogod_ipp_primitives.go ippReadChunkedBody integer coercion6.3 Medium- pgbouncerPgBouncer integer overflow in PgBouncer network packet parsing7.5 High
- servo smallbitvecsmallbitvec: Safe API Triggered Heap Buffer Overflow via Integer Overflow7.3 High
- vim, neovim +1 moreVim: Heap Buffer Overflow in spell file loading6.6 Medium
- linux, linux kernel +1 morelibceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()9.1 Critical
- linux, linux kernel +1 morelibceph: Use u32 for non-negative values in ceph_monmap_decode()7.5 High
- linux, linux kernel +1 moredrm/i915: Fix potential overflow of shmem scatterlist length7.8 High
- linux, linux kernel +1 morenet/ipv6: ioam6: prevent schema length wraparound in trace fill9.8 Critical
- php, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreSigned integer overflow in metaphone()6.3 Medium
- academysoftwarefoundation openexrOpenEXR: Shift exponent overflow in `readVariableLengthInteger()` (`ImfIDManifest.cpp`)6.3 Medium
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 10.0 extended update support +7 more +9 moreOpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public API8.8 High
kanidmd_libcrates.iokanidmd_lib: Image upload validators run before authorization; PNG validator panics on malformed input6.9 Mediumgithub.com/bluenviron/mediamtxGoMediaMTX affected by CVE-2026-27143 due to vulnerable dependency2.7 Low- linux, linux kernel +1 moreovpn: tcp - fix packet extraction from stream7.5 High
- linux, linux kernel +1 morexfs: delete attr leaf freemap entries when empty8.8 High
- Show moreLoading…