CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows HTTP.sys Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows HTTP.sys Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Installer Elevation of Privilege Vulnerability7.8 High
- adobe c2pa, c2pa-web, c2patool +3 more +5 moreCAI Content Credentials | Integer Overflow or Wraparound (CWE-190)6.2 Medium
- adobe c2pa, c2pa-web, c2patool +3 more +5 moreCAI Content Credentials | Integer Overflow or Wraparound (CWE-190)6.2 Medium
- adobe c2pa, c2pa-web, c2patool +3 more +5 moreCAI Content Credentials | Integer Overflow or Wraparound (CWE-190)6.2 Medium
- No product listedInteger overflow in the UEFI firmware for the Intel(R) Slim Bootloader may allow an information...2.4 Low
- vimVim: Heap Buffer Overflow in Text Property Handling7.1 High
- red hat jboss enterprise application platform 7, jboss enterprise application platform 7.4 els on rhel 7, jboss enterprise application platform 7.4.25 +5 more +7 moreJboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service7.5 High
- linuxwifi: at76c50x-usb: avoid length underflow in at76_guess_freq()8.1 High
- linuxsctp: validate stream count in sctp_process_strreset_inreq()7.5 High
- linuxtipc: fix u16 MTU truncation in media and bearer MTU validation7.8 High
- linuxdrm/amdkfd: fix 32-bit overflow in CWSR total size calculation7.8 High
- linuxlibceph: Fix multiplication overflow in decode_new_up_state_weight()9.8 Critical
- linuxiomap: fix out-of-bounds bitmap_set() with zero-length range7.8 High
- linuxmac802154: llsec: reject frames shorter than the authentication tag8.8 High
- linuxdrm/amdgpu/vce: fix integer overflow in image size8.8 High
- gnu emacsHeap Buffer Overflow in GNU Emacs for Android5.3 Medium
- gnu emacsInteger Overflow in GNU Emacs for Android5.3 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +5 more +7 moreGstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read7.1 High
perlAzure Linux,perl-Attribute-HandlersRed Hat,perl-AutoLoaderRed Hat +98 more +100 morePerl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch5.7 Medium- cisco secure endpointClamAV PESpin File Format Processing Integer Overflow Vulnerability7.5 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: denial of service via signed integer overflow in fli file processing5.5 Medium
- ffmpegFFmpeg 0.5 < 9.0 DVB Subtitle Parser Heap Buffer Overflow via WTV File8.5 High
- google chromeInteger overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...3.1 Low
- ggml llama.cppllama.cpp b4882–b9058 Buffer Overflow in KV Cache State Restore9.2 Critical
- ggml llama.cppllama.cpp b1283–b9058 Integer Overflow in llama_batch_init() Function8.5 High
- ggml llama.cppllama.cpp b1886–b7445 Integer Overflow via new_1batch() in llama-android.cpp8.5 High
- linuxsmb/client: Fix error code in smb2_aead_req_alloc()8.8 High
- hdfgroup hdf5HDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds read6.8 Medium
- mackron dr libsdr_wav.h W64 CUE Chunk Metadata Parsing Integer Overflow Leading to Heap Buffer Overflow on 32-bit Builds7.8 High
- opensipsOpenSIPS: SIP Message Smuggling via TCP Content-Length Integer Overflow7.5 High
- qualcomm lemans au lgit firmware, lemansau firmware, qam8255p firmware +31 more +33 moreInteger Overflow or Wraparound in Data Network Stack & Connectivity7.8 High
- academysoftwarefoundation openimageioOpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGV5.5 Medium
- ai nanoidnanoid: Integer Overflow or Wraparound7.4 High
- o6 automation open62541o6 Automation open62541 Integer Overflow or Wraparound8.7 High
- o6 automation open62541o6 Automation open62541 Integer Overflow or Wraparound8.7 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +14 more +16 morePcp: pcp: denial of service due to signed integer overflow7.5 High
- google chromeInteger overflow in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote...9.6 Critical
- google chromeInteger overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...9.6 Critical
- google chromeInteger overflow in libxml in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who...9.6 Critical
- google chromeInteger overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who...9.6 Critical
- pgvector project pgvectorpgvector buffer overflow via integer wraparound in IVFFlat index build on 32-bit systems8.8 High
- apache traffic serverApache Traffic Server: Integer-handling errors in HPACK/XPACK decoding corrupt memory6.9 Medium
- alanxz rabbitmq-crabbitmq-c: amqp_decode_bytes size_t integer overflow bypasses bounds check on 32-bit (OOB read)7.4 High
- apple ipados, macos, tvos +4 more +6 moreAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6...7.8 High
- Show moreLoading…