CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreLibvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow7.8 High
- coturnCoturn: uint16_t truncation overflow in STUN message length causes TCP stream framing bypass5.3 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS9.8 Critical
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS3.6 Low
- ibm powervm hypervisor, power system e1050 \(9043-mrx\) firmware, power system e1080 \(9080-hex\) firmware +24 more +26 morePower System Integer Overflow8.4 High
- ibm virtualization management interface, power system e1050 \(9043-mrx\) firmware, power system e1150 \(9043-mru\) firmware +15 more +17 morePower System Integer Overflow4.5 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.5 High
- ibm powervm hypervisor, power system e1050 \(9043-mrx\) firmware, power system e1080 \(9080-hex\) firmware +24 more +26 morePower System Integer Overflow8.2 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS9.8 Critical
- ibm power systems firmware, power hardware management console \(7063-cr2\) firmware, power system ac922 \(8335-gth\) firmware +27 more +29 morePower System Integer Overflow8.2 High
- ibm power systems firmware, power system e1050 \(9043-mrx\) firmware, power system e1080 \(9080-hex\) firmware +17 more +19 morePower System Integer Overflow6.7 Medium
- jkuhlmann cgltfcgltf 1.15 Integer Overflow via cgltf_validate() Accessor Bounds Check6.9 Medium
- baresip relibre: Integer overflow in websock_decode() masked frame length check leads to heap buffer overflow9.3 Critical
- dragonflydb dragonflyDragonflyDB `CMS.INITBYDIM` integer overflow leads to a remote, attacker-controlled heap out-of-bounds write8.8 High
- mozilla firefox, thunderbird +1 moreInteger overflow in the Graphics component7.5 High
- mozilla firefox, thunderbird +1 moreInteger overflow in the Graphics component9.8 Critical
- apple ipados, macos, tvos +4 more +6 moreAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6...8.8 High
- quantumnous new-apiNew API: Integer overflow in quota billing yields negative charges (self-crediting)9.1 Critical
libdbi-perlDebian,perl-DBIAzure Linux +1 moreDBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by preparse9.8 Critical- linuxdm-log: fix a bitset_size overflow on 32bit machines7.8 High
- linuxdrbd: reject data replies with an out-of-range payload size9.8 Critical
- linuxBluetooth: btrtl: validate firmware patch bounds7.8 High
- ibm iIBM i is Affected By Multiple Vulnerabilities in NetServer6.5 Medium
- ibm iIBM i is Affected By Multiple Vulnerabilities in DRDA / DDM5.3 Medium
- absolute secure accessCVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57....6.0 Medium
- vllmvLLM: Cross-User Data Leak Vulnerability5.3 Medium
- rsyncproject rsyncrsync 3.1.0 < 3.5.0 Signed Integer Overflow via MSG_IO_TIMEOUT7.1 High
- gimpGIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- gimpGIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- gimpGIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- gimpGIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- gimpGIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- postgresqlPostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound8.8 High
- postgresqlPostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparound8.8 High
- postgresqlPostgreSQL tsvector and tsquery undersize allocations, via integer wraparound8.8 High
- mongodb bi connector odbc driverMongoDB BI Connector ODBC driver may write outside an allocated buffer when handling oversized catalog object names9.5 Critical
- adobe lightroom, lightroom classic +1 moreLightroom Classic | Integer Overflow or Wraparound (CWE-190)7.8 High
- microsoft windows 10 version 1809, windows server 2019, windows server 2019 (server core installation) +4 more +6 moreWindows Device Health Attestation (DHA) Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows DNS Elevation of Privilege Vulnerability6.7 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2019 +8 more +10 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office 2016 +9 more +11 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office 2019 +8 more +10 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office 2016 +9 more +11 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft .net, .net 10.0 runtime, .net 8.0 runtime +13 more +15 more.NET Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows GDI+ Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +12 more +14 moreWindows Projected File System Elevation of Privilege Vulnerability7.8 High
- microsoft .net, skiasharp +1 more.NET Elevation of Privilege Vulnerability7.8 High
- microsoft outlook, 365 apps, 365 apps for enterprise +6 more +8 moreMicrosoft Outlook Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreMicrosoft Windows Storage Port Driver Elevation of Privilege Vulnerability7.8 High
- microsoft .net, .net framework, .net 10.0 runtime +13 more +15 more.NET Framework Remote Code Execution Vulnerability7.0 High
- Show moreLoading…