CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- virtio-win kvm-guest-drivers-windowsvirtio-win: Integer overflow causing a heap overflow in Viosock driver7.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreCockpit: cockpit: unauthorized modification of login records via integer overflow3.6 Low
- ibm mqIBM MQ queue manager is vulnerable to remote code execution8.8 High
- strukturag libheiflibheif hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV3.7 Low
- d3tn gmbh µd3tnInteger Overflow or Wraparound in µD3TN7.5 High
- synology diskstation manager (dsm)An integer overflow or wraparound vulnerability in File Operation in Synology DiskStation Manager...4.3 Medium
- freedesktop popplerFreedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow5.3 Medium
- freedesktop popplerFreedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflow5.3 Medium
- freedesktop popplerFreedesktop Poppler SampledFunction Function.cc integer overflow5.3 Medium
- esp32async espasyncwebserverESPAsyncWebServer: Integer overflow in multipart boundary parser causes denial of service8.7 High
- qualcomm cologne firmware, fastconnect 7800 firmware, snapdragon x2 elite firmware +5 more +7 moreInteger Overflow or Wraparound in OOBM7.8 High
- square wireWire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799)7.5 High
- rabbitmq amqp091-goRabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow9.1 Critical
- gnome gimp, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreGimp: integer overflow when generating a thumbnail preview for a psd file7.8 High
- samsung open source escargotInteger overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with...5.5 Medium
- google chromeInteger overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker...4.3 Medium
- google chromeInteger overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...9.6 Critical
- hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system +2 moreUnauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution or Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways8.1 High
- freerdpFreeRDP before 3.31.0 Integer Overflow Double Free7.1 High
- apple macosAn integer overflow was addressed with improved input validation. This issue is fixed in macOS...5.5 Medium
- apple macosAn integer overflow was addressed with improved input validation. This issue is fixed in macOS...5.9 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7...5.5 Medium
- apple macosAn integer overflow was addressed with improved input validation. This issue is fixed in macOS...6.6 Medium
- apple macosAn integer overflow was addressed with improved input validation. This issue is fixed in macOS...7.1 High
- apple ipados, macos, tvos +4 more +6 moreAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7...7.3 High
- apple macosAn integer overflow was addressed with improved input validation. This issue is fixed in macOS...7.5 High
- apple macosAn integer underflow was addressed with improved input validation. This issue is fixed in macOS...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...8.8 High
- apple ipados, macos, safari +5 more +7 moreAn integer overflow was addressed with improved input validation. This issue is fixed in Safari...8.8 High
- apple macosAn integer overflow was addressed with improved input validation. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7...6.5 Medium
- marcobambini gravitymarcobambini Gravity udp json-parser gravity_json.c integer overflow6.9 Medium
- simon tatham portable puzzle collectionAn issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial...2.9 Low
- No product listedembedded-graphics image_raw.rs new/bytes_per_row integer overflow6.9 Medium
- No product listedembedded-graphics image_raw.rs draw_sub_image integer overflow6.9 Medium
- msgpack msgpack-javamsgpack-java through 0.9.12 Integer Overflow via MAP326.9 Medium
- orthanc dicom serverOrthanc DICOM Server Integer Overflow or Wraparound7.2 High
- libp2p libp2p-rendezvouslibp2p-rendezvous through 0.17.1 Denial of Service via Unbounded Registration TTL in Discovery Responses8.7 High
- pcre pcre2PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant...6.5 Medium
- pcre pcre2PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an...5.7 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGstreamer1-plugins-good: gstreamer: integer overflow and out-of-bounds read in qtdemux cea-608 closed-caption parser4.4 Medium
- netskope endpoint dlpNetskope Endpoint DLP Driver Integer Overflow Leading to Kernel Pool Overflow8.7 High
- mongodb c driverHeap buffer overflow via wrapped size check during SASL username canonicalization in MongoDB C Driver5.7 Medium
- amazon deep java libraryInteger overflow in tensor buffer validation in Deep Java Library8.8 High
- rclonerclone local: crafted Range request against a translated symlink panics (DoS)5.3 Medium
- luben zstd-jnizstd-jni 1.1.1 through 1.5.7-13 Out-of-Bounds Read via Direct ByteBuffer Frame-Size Methods8.8 High
- videolan vlc media playerVLC media player 3.0.0 through 3.0.23 memory corruption vulnerability7.3 High
- google chromeInteger overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote...9.6 Critical
- google chromeInteger overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...4.3 Medium
- adobe acrobat, acrobat reader, acrobat 2024 +2 more +4 moreAcrobat Reader | Integer Overflow or Wraparound (CWE-190)7.8 High
- Show moreLoading…