CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- aswf openapvOpenAPV before 1.1.1.0 has a read_bitstream heap-based buffer overflow.5.1 Medium
- google chromeInteger overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to...4.3 Medium
- google chromeInteger overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed a remote attacker...4.3 Medium
- apache software foundation thriftApache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled string length8.7 High
- apache software foundation thriftApache Thrift: C++ THttpTransport grows its line buffer without bound9.2 Critical
- apache http serverApache HTTP Server: mod_dav_fs namespace overflow8.8 High
- tonycoz imagerImager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw_datachannels value in i_readraw_wiol7.5 High
- google androidIn rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer...7.8 High
- nvidia geforce, rtx, quadro, nvs, tesla +2 moreNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an...7.8 High
- nvidia geforce, guest driver, rtx, quadro, nvs +1 more +3 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer...7.8 High
- nvidia geforce, guest driver, rtx, quadro, nvs +1 more +3 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer...7.8 High
- nvidia geforce, rtx, quadro, nvs, tesla +2 moreNVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode...7.8 High
- blosc c-blosc2Blosc C-Blosc2 blosclz Decompression blosclz.c blosclz_decompress integer overflow6.3 Medium
- apache wss4jApache WSS4J: Unauthenticated denial of service via integer overflow in DER parsing of X.509 certificate extensions7.5 High
- apache software foundation plc4xApache PLC4X: Go binding: unbounded allocation and framing failures on wire-controlled lengths8.7 High
- nothings stbNothings stb Image Encoding stb_image_write.h stbi_write_tga_core integer overflow6.9 Medium
- nothings stbNothings stb stb_hexwave.h hexwave_init integer overflow6.9 Medium
- freedesktop popplerFreedesktop Poppler SplashClip.cc clipToPath integer overflow4.8 Medium
- denx software engineering u-bootU-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation5.2 Medium
- freedesktop popplerFreedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflow4.8 Medium
- libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc8.2 High
- nvidia deepstreamNVIDIA DeepStream contains a vulnerability where an attacker could cause an integer overflow by...7.8 High
- trusted domain project opendmarcTrusted Domain Project OpenDMARC opendmarc_policy.c integer overflow6.9 Medium
- google chromeInteger overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who...3.4 Low
- esri lercEsri Lerc has a security vulnerability7.5 High
- phpInteger overflow to buffer overflow in soap HTTP parsing6.5 Medium
- phpPhar TAR phar_tar_number() Integer Overflow - Archive Entry Injection4.3 Medium
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 moreMicrosoft Office Outlook Remote Code Execution Vulnerability7.5 High
- linux, linux kernel +1 moresmb/client: validate new EOF for insert range5.5 Medium
- mongodb python driverHeap out-of-bounds write via signed size overflow in BSON document encoding7.5 High
- bytecodealliance wasmtimeWasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Host Panic via WASI Filesystem Timestamp Overflow6.9 Medium
libsndfileAzure Linux,rootio-libsndfileRoot +1 morelibsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing...7.5 High- No product listedminimp3 commit ea99364f contains an integer overflow vulnerability in mp3dec_skip_id3v1() when...9.8 Critical
- No product listedSumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec()...7.5 High
mpackUbuntuAn integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms...9.8 Critical- gitlabInteger Overflow or Wraparound in GitLab9.9 Critical
pgbouncerAzure LinuxInteger overflow causes an infinite loop in packet buffer growth in PgBouncer7.5 High- alsa project alsa-libalsa-lib through 1.2.16.1 Integer Overflow via Topology File4.8 Medium
- ffmpegFFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(),...6.9 Medium
- adobe c2pa, c2patool, content credentials command-line tool +1 more +3 moreCAI Content Credentials | Integer Overflow or Wraparound (CWE-190)5.5 Medium
- rti connext professionalInteger Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional (Core Libraries) allows Shared Resource Manipulation.7.3 High
- netdataNetdata: Streaming protocol dimension slot has no upper-bound guard, allowing integer overflow and out-of-bounds write6.5 Medium
- radare radare2radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +7 more +9 moreGcc: libstdc++ integer overflow in `new` operator7.7 High
libnet-idn-encode-perlDebian,perl-Net-IDN-EncodeopenSUSE +1 moreNet::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode6.5 MediummpackUbuntuAn integer overflow vulnerability exists in MPack 1.1.1 in mpack_node_cstr_alloc() and...6.2 Medium- No product listedAn integer overflow in the _BulkInsert_ReadProperty component (/bulk_insert.c) of FalkorDB (Redis...5.3 Medium
- No product listedSerenityOS LibGfx BMPLoader.cpp decode_bmp_pixel_data integer overflow2.3 Low
- oisf suricataSuricata swf: heap buffer overflow in SWF decompression depth handling3.7 Low
- ibm mqIBM MQ queue manager is vulnerable to privilege escalation8.8 High
- Show moreLoading…