CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and...6.9 Medium
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that...6.9 Medium
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibexpat before 2.8.2 has an integer overflow in getAttributeId.6.9 Medium
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibexpat before 2.8.2 has an integer overflow in addBinding.6.9 Medium
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibexpat before 2.8.2 has an integer overflow in storeAtts.6.9 Medium
- ohler55 ojOj: Integer Overflow in Oj.load 2GB String Handling6.3 Medium
- ohler55 ojOj: Negative-Size memcpy in Oj::Parser create_id Attribute Handling6.3 Medium
- struktur libde265libde265 has a heap buffer overflow in de265_image_get_buffer via SPS dimension integer overflow7.1 High
- nokogiriNokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`6.3 Medium
- mitsubishi electric corporation electric melsec iq-f series fx5-eip ethernet/ip module fx5-eipDenial-of-service (DoS) vulnerability in MELSEC iQ-F Series EtherNet/IP module8.7 High
- freerdpFreeRDP: Integer Overflow in `freerdp_image_copy_from_icon_data` Bypasses Bounds Check6.1 Medium
- freerdpFreeRDP: Heap-buffer-overflow write in AVC444 YUV buffer allocation8.7 High
- haproxyHAProxy - Integer Overflow in FCGI Demux Record Length Field9.0 Critical
- ncalcNCalc: Denial of Service via Unbounded and Non-Terminating Factorial Evaluation4.8 Medium
- sonos tracttract-nnef: integer overflow in NNEF `.dat` tensor parser yields an out-of-bounds read on model load6.1 Medium
- util-linuxutil-linux libblkid DOS extended-partition overflow produces invalid partition metadata8.0 High
- rxi microtarInteger Overflow in rxi/microtar mtar_next() Causes Infinite Loop DoS8.7 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +14 more +16 morePacemaker: pacemaker: denial of service via integer overflow in remote message decompression8.6 High
- linux, linux kernel, red hat nvidia for rhel 10 +28 more +30 morenet/sched: fix pedit partial COW leading to page cache corruption7.8 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreGstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handling7.1 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +12 more +14 moreGstreamer1-plugins-good: gstreamer: heap buffer overflow in wavpack decoder via integer overflow7.6 High
- the document foundation libreofficeHeap buffer overflow in EMF+ gradient brush import5.4 Medium
- gpacAn Out-of-Memory in the mp4_mux_cenc_insert_pssh function (filters/mux_isom.c) of GPAC MP4Box v2...5.5 Medium
- avira antivirus, gen digital avira antivirus +1 moreAvira antivirus engine heap buffer OOB write when scanning a malformed MS-DOS executable file7.8 High
- connectbot cbsshConnectBot SSH: Excessive allocation and integer overflow in DER private-key parsing6.7 Medium
- m2team nanazipNanaZip: Heap out-of-bounds read in NanaZip AVB hashtree descriptor parser via 32-bit unsigned integer overflow5.4 Medium
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8, directory server 11.9 for rhel 8 +20 more +22 more389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow7.6 High
- qnap qts, quts hero +1 moreQTS, QuTS hero5.1 Medium
- adobe c2pa, c2pa-web, content credentials js sdk +1 more +3 moreCAI Content Credentials | Integer Overflow or Wraparound (CWE-190)7.5 High
- adobe acrobat, acrobat 2024, acrobat dc +1 more +3 moreAcrobat Reader | Integer Overflow or Wraparound (CWE-190)5.5 Medium
- microsoft excel, excel for android, powerpoint for android +30 more +32 moreWindows Graphics Component Remote Code Execution Vulnerability7.8 High
- microsoft excel, excel for android, powerpoint for android +30 more +32 moreWindows Graphics Component Remote Code Execution Vulnerability7.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +8 more +10 moreWindows Performance Monitor Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreNT OS Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows SDK Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +23 more +25 moreWindows Internet (wininet.dll) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreHTTP.sys Remote Code Execution Vulnerability9.8 Critical
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +8 more +10 moreWindows Kerberos Key Distribution Center (KDC) Remote Code Execution7.1 High
- linux, linux kernel +1 moreRDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE9.8 Critical
- huawei emui, harmonyos +1 moreDoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may...5.0 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Denial of Service via Integer Overflow in SpEL Expressions7.5 High
- strukturag libheiflibheif: unbounded heap allocation in HEIF sequence parser (stsz fixed-size mode missing bound check)7.5 High
- academysoftwarefoundation openexrOpenEXR: Integer overflow in the HTJ2K decoder leads to heap-buffer-overflow6.1 Medium
- No product listedThe utility functions used by Malwarebytes EDR 1.0.11 on Linux for calculating a cryptographic...8.2 High
- 7-zipGHSL-2026-122 7-Zip Ar SYMDEF OOB Read6.5 Medium
- google chromeInteger overflow in Fonts in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...6.5 Medium
- google chromeInteger overflow in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local...5.0 Medium
- google chromeInteger overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local...5.0 Medium
- google chromeInteger overflow in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who...9.6 Critical
- google chromeInteger overflow in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote...8.8 High
- Show moreLoading…