CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- mongodb c driverHeap write primitive via size round-up wrap during JSON parsing on 32-bit builds5.9 Medium
- erlang otpA Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer8.2 High
- rockwell automation rslinx classic®RSLinx Classic® - Multiple Vulnerabilities9.2 Critical
- mozilla firefox, thunderbird +1 moreInteger overflow in the Graphics: ImageLib component9.8 Critical
- ash-project ashAsh.Vector wraps the 16-bit dimension header for vectors over 65,535 elements, corrupting data and crashing reads5.9 Medium
- google androidIn multiple locations, there is a possible permission bypass due to an integer overflow. This...6.7 Medium
- google androidIn VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to...7.8 High
- google androidIn multiple locations, there is a possible out of bounds write due to an integer overflow. This...7.8 High
- google androidIn tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an...7.8 High
- google androidIn convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a...4.3 Medium
- google androidIn multiple locations, there is a possible permission bypass due to an integer overflow. This...8.4 High
- msi dragon centerMSI Dragon Center MMIO Write Path NTIOLib_X64.sys MmioWritePath integer overflow9.3 Critical
- klever-io klever-goKlever-Go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply8.7 High
- klever-io klever-goKlever-Go: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)9.6 Critical
- watchguard fireware osFireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution9.3 Critical
ffmpegDebian,ffmpeg-4openSUSE,ffmpeg-7openSUSE +3 more +5 moreAn integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528...7.5 HighffmpegDebian,ffmpeg-4openSUSE,ffmpeg-7openSUSE +3 more +5 moreAn integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528...7.5 HighffmpegDebian,ffmpeg-4openSUSE,ffmpeg-7openSUSE +3 more +5 moreAn integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows...7.5 HighffmpegDebian,ffmpeg-4openSUSE,ffmpeg-7openSUSE +3 more +5 moreAn integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528...7.5 HighffmpegDebian,libavUbuntu +1 moreAn integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 allows...6.5 Medium- No product listedAn integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of...7.5 High
- No product listedAn integer overflow in the /nnrf-disc/v1/nf-instances component of open5gs v2.7.6 allows...7.5 High
- broadcom reactor coreReactor Core windowTimeout fair-backpressure stream hang due to 20-bit index wrap-around5.9 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: stack vla size underflow denial of service in seattle5.5 Medium
- sasaki nobuyuki corvusskkCorvusSKK contains an integer overflow vulnerability, which may allow malicious data to be...4.6 Medium
u-bootDebian,u-boot-nezhaUbuntu +1 moreAn issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists...9.8 Criticalu-bootDebian,u-boot-nezhaUbuntu +1 moreAn issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the...9.8 Critical- google chromeInteger overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...8.3 High
- academysoftwarefoundation openexrOpenEXR: DWAA InputFile AC buffer overflow on ILP32 platforms7.1 High
- academysoftwarefoundation openexrOpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) builds7.1 High
- ni labviewInteger Overflow Vulnerability Resulting in an Out of Bounds Write in NI LabVIEW6.9 Medium
- academysoftwarefoundation openexrOpenEXR: Signed Integer Overflow Leading to Out-of-Bounds Memory Access in Deep Tile Decoding5.5 Medium
libtiffAzure Linux,tiffDebian,libtiff-develRed Hat +2 more +4 moreAn issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute...8.4 High- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit7.0 High
libtiffAzure Linux,tiffDebian,libtiff-develRed Hat +2 more +4 moreAn integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip...7.8 High- gnu emacsGNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader6.9 Medium
- internationalcolorconsortium iccdeviccDEV: CIccEmbedIO::Read8() size_t underflow6.5 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.2 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS9.8 Critical
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.5 High
- microsoft azure data manager for energyAzure Data Manager for Energy Remote Code Execution Vulnerability8.5 High
- libvipslibvips: Integer overflow leading to heap buffer overflow leading to possible attacker-controlled mmap-resident write8.4 High
io.netty.incubator:netty-incubator-codec-bhttpMavennetty-incubator-codec-ohttp: Binary HTTP parser unchecked varint length overflow causes decoder crash5.3 Medium- msgpack msgpack-cmsgpack-c Integer Overflow in msgpack_unpacker_expand_buffer Causes a False-Success Undersized Reservation5.8 Medium
- hank-ai darknetdarknet Integer Overflow in Convolutional Layer Buffer Sizing Leads to Heap Buffer Overflow8.5 High
- gimpGIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- gimpGIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- Show moreLoading…