CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeInteger overflow in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote...6.5 Medium
- google chromeInteger overflow in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote...6.5 Medium
- google chromeInteger overflow in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker...8.3 High
- google chromeInteger overflow in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who...8.3 High
- samsung open source rlottieInteger overflow or wraparound vulnerability in Samsung Open Source rlottie allows Integer...6.1 Medium
- cilium ebpfcilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow4.8 Medium
- 7-zipGHSL-2026-140_7-Zip: 7-Zip has a heap buffer overflow via NTFS compressed stream buffer under-allocation8.8 High
gobgpDebian,github.com/osrg/gobgp/v4Go,govulncheck-vulndbopenSUSE +2 moreGoBGP: Integer underflow in the BGPUpdate.DecodeFromBytes function7.5 High- red hat ai inference server 3.3, enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 morePoppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication7.8 High
- janet-lang janetjanet-lang janet marsh.c unmarshal_one_fiber integer overflow4.8 Medium
- google androidIn numberOfReportBlocks of RtpSession.cpp, there is a possible out of bounds write due to an...8.8 High
- google androidIn IntfGraphCreate of intfgraph.c, there is a possible out of bounds write due to an integer...8.8 High
- google androidIn ExecuteGraph command handler of EdgeTPU firmware, there is a possible out of bounds write due...7.8 High
- google androidIn multiple functions of VideoRtpPayloadDecoderNode.cpp, there is a possible out of bounds write...8.8 High
- google androidIn RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overflow....4.3 Medium
- google androidIn RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow....7.3 High
- google androidIn RtcpFbPacket::decodeRtcpFbPacket, there is a possible out of bounds read due to an integer...6.5 Medium
- google androidIn l2c_fcr_clone_buf of l2c_fcr.cc, there is a possible way to trigger controlled heap corruption...8.0 High
- google androidIn multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due...6.5 Medium
- google androidIn multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of...5.5 Medium
- google androidIn multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due...6.5 Medium
- google androidIn multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause the system...6.5 Medium
- google androidIn multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of...5.5 Medium
- google androidIn multiple functions of ubsan_throwing_runtime.cpp, there is a possible UBSan failure due to an...6.5 Medium
- google androidIn multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due...6.5 Medium
- google androidIn multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of...6.5 Medium
- android framework, google android +1 moreIn multiple locations, there is a possible way to achieve code execution due to an integer...8.4 High
- tirr-c jxl-grid, jxl-oxide +1 morejxl-oxide: Out-of-bounds writes due to integer overflow in jxl-grid on 32-bit platforms7.3 High
- google chromeInteger overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...6.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()7.8 High
- linux, linux kernel +1 morebatman-adv: fix integer overflow on buff_pos8.8 High
- struktur libheiflibheif has integer overflow in inline mask size calculation that causes undersized buffer allocation6.1 Medium
- struktur libheiflibheif has an incomplete fix for CVE-2026-3949: integer overflow bypass in vvdec_push_data26.8 Medium
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moresmb: client: validate dacloffset before building DACL pointers9.8 Critical
- mcdope pam usbpam_usb: Unchecked integer multiplication before xmalloc() in conf.c allows heap-based buffer overflow on 32-bit targets6.7 Medium
- linux, linux kernel +1 morentfs3: fix integer overflow in run_unpack() volume boundary check7.8 High
- linux, linux kernel +1 moreRDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv9.1 Critical
- linux, linux kernel +1 morerxgk: Fix potential integer overflow in length check9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredm mirror: fix integer overflow in create_dirty_log()5.5 Medium
- linux, linux kernel +1 moreslub: fix data loss and overflow in krealloc()5.5 Medium
- pavel-odintsov fastnetmonFastNetMon Community Edition through 1.2.9 contains an integer overflow in the BGP AS_PATH...9.8 Critical
- pavel-odintsov fastnetmonFastNetMon Community Edition through 1.2.9 contains an integer overflow vulnerability in the...7.1 High
- golang.org/x/sys golang.org/x/sys/windowsInvoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows3.3 Low
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh +1 moreInvoking infinite loop on large channel writes in golang.org/x/crypto/ssh9.1 Critical
armnnDebianIn Arm ArmNN through 2026-03-27, an integer overflow in TensorShape::GetNumElements() in armnn...6.2 Medium- imagemagickImageMagick - Division by Zero in Binomial Kernel Processing4.8 Medium
- hp linux imaging and printing, hp inc linux imaging and printing software, hp, inc. hp linux imaging and printing software +15 more +17 moreHP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution9.3 Critical
- nvidia triton inference serverNVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker...8.0 High
- nvidia triton inference serverNVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an integer...7.5 High
- rsyncproject rsync, red hat discovery 2, enterprise linux 10 +5 more +7 moreRsync < 3.4.3 Integer Overflow Information Disclosure6.1 Medium
- Show moreLoading…