CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 morewifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap7.6 High
- microsoft terminal, windows terminal app +1 moreWindows Terminal Remote Code Execution Vulnerability7.5 High
- adobe c2pa, c2pa-web, c2patool +3 more +5 moreCAI Content Credentials | Integer Overflow or Wraparound (CWE-190)6.2 Medium
- adobe bridgeBridge | Integer Overflow or Wraparound (CWE-190)7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreRemote Desktop Client Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreWindows Remote Access Service Infrastructure Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows NFS Server Elevation of Privilege Vulnerability8.8 High
- microsoft terminal, windows 10 version 21h2, windows 10 version 22h2 +13 more +15 moreWindows Terminal Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows NTFS Elevation of Privilege Vulnerability7.8 High
- microsoft powerpoint, 365 apps, 365 apps for enterprise +10 more +12 moreMicrosoft PowerPoint Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office 2016 +9 more +11 moreMicrosoft Office Information Disclosure Vulnerability5.5 Medium
- microsoft word, 365 apps, 365 apps for enterprise +14 more +16 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office 2016 +13 more +15 moreMicrosoft Office Information Disclosure Vulnerability6.2 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Message Queuing (MSMQ) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreWindows Overlay Filter Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +14 more +16 moreWindows Human Interface Device Information Disclosure Vulnerability4.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Data.dll Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows TCP/IP Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Spaceport.sys Elevation of Privilege Vulnerability6.8 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreWindows Storage Spaces Direct Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +14 more +16 moreWindows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability7.8 High
- microsoft malware protection engineMicrosoft Defender Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows Resilient File System (ReFS) Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreStorage Spaces Direct Elevation of Privilege Vulnerability6.8 Medium
- python pillowPillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`8.2 High
- python pillowPillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow7.5 High
- zephyrproject zephyrXtensa MPU `arch_buffer_validate()` integer-overflow lets a user thread bypass syscall pointer validation7.8 High
- perl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morePerl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string bra…9.1 Critical
- perl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morePerl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack8.4 High
- haarg storable, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreStorable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record9.8 Critical
- fossies gawkHeap buffer overflow in gawk5.1 Medium
- fossies gawkHeap buffer overflow in gawk2.1 Low
- winfspSuccessful exploitation of the integer overflow vulnerability could allow an attacker to achieve...7.8 High
- samsung rlottieSamsung rlottie: Numeric truncation in gray_hline() leads to heap-based buffer overflow when rendering a crafted Lottie animation at native canvas size5.5 Medium
- opener project openerIn OpENer 2.3.0 (commit 76b95cf) when parsing incoming CIP (Common Industrial Protocol) network...9.1 Critical
- No product listedAn issue in MikroTIk (SIA Mikrotikls, Latvia) RouterOS 7.21.x before v.7.21.4 and 7.22.x before v...7.5 High
- freerdpFreeRDP: Integer overflow leading to heap buffer overflow in Orders Delta Points parsing8.6 High
jbig2decDebianAn integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows...7.5 High- google chromeInteger overflow in Extensions API in Google Chrome prior to 150.0.7871.115 allowed an attacker...4.3 Medium
- linuxfoundation nats-serverNATS Server: Remote crash via integer overflow in Connz pagination7.7 High
- immutable-js immutable, immutable-js +1 moreImmutable.js `List` 32-bit trie overflow → unrecoverable DoS8.7 High
- dell powerprotect data domain, data domain operating system +1 moreDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0...7.5 High
- academysoftwarefoundation openexrOpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample counts6.2 Medium
- academysoftwarefoundation openexrOpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resize0.0 None
- gnu wgetGNU Wget 1.25.0 Heap Buffer Overflow via HTML Attribute Encoding6.0 Medium
- gnu wgetGNU Wget 1.25.0 Integer Overflow via Content-Range Header Parsing6.9 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGimp: gimp: integer overflow in read_rle_channel()7.3 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: denial of service via integer overflow in playstation tim loader5.5 Medium
- Show moreLoading…