CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Client for NFS Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +14 more +16 moreWindows IP Over USB Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +7 more +9 moreWindows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +10 more +12 moreMicrosoft PowerShell Remote Code Execution Vulnerability7.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +10 more +12 moreWindows Spaceport.sys Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows NTFS Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows USB Video Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreMicrosoft Account Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows MIDI Service Module Elevation of Privileges Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreRemote Desktop Client Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreMicrosoft PowerShell Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Error Reporting Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows iSCSI Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreKernel Streaming Service Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreKernel Streaming Service Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Overlay Filter Elevation of Privilege Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +7 more +9 moreMicrosoft Office Word Remote Code Execution Vulnerability7.5 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 moreMicrosoft Office Visio Remote Code Execution Vulnerability8.8 High
- microsoft hevc video extensions, hevc video extensions for licensed applications, hevc video extensions from device manufacturer +2 moreHEVC Video Extensions Remote Code Execution Vulnerability8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreDevice-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices3.3 Low
- mozilla thunderbirdInteger overflow in libmime buffer growth could lead to heap corruption8.4 High
- commvault cloudCvFWD Denial of Service7.1 High
- ami aptiovUEFI OOB Write and Buffer Overflow Vulnerabilities7.1 High
- freerdpFreeRDP 3.11.0 before 3.32.0 Integer Overflow via Mapped Video Geometry Update7.1 High
- opens100 project opens100OpenS100 S-102 Parser Integer Overflow Heap Buffer Overflow7.1 High
- gitlab, gitlab community edition and enterprise edition, ruby-lang ruby +2 moreInteger Overflow or Wraparound in GitLab10.0 Critical
mp4v2UbuntuAn issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom:...7.8 High- mozilla firefox, thunderbird +1 moreInteger overflow in the Graphics component8.8 High
- mozilla firefox, thunderbird +1 moreInteger overflow in the Layout: Text and Fonts component5.4 Medium
- postgresql psqlodbcpsqlODBC SQLBindParameter heap memory corruption when binding more than 32767 parameters5.9 Medium
- apache software foundation datasketchesApache DataSketches: datasketches-cpp: Out-of-bounds read in compact Theta sketch deserialization allows denial of service via a crafted sketch9.1 Critical
- duty1g x64dbg-mcp-serverx64dbg-MCP Server vulnerable to pre-authentication denial of service through Content-Length integer overflow5.3 Medium
- zephyrproject zephyrInteger overflow in dynamic kernel object allocation allows user-mode threads to corrupt the kernel heap8.8 High
- sumatrapdfreader sumatrapdfSumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer read5.5 Medium
- mongodb go driverApplication denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver8.2 High
- containerd overlaybdcontainerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow ...6.8 Medium
- excelizeExcelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader6.5 Medium
- excelizeExcelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows7.5 High
- imagemagickImageMagick: Heap Buffer Over-Write in distributed pixel cache server will result in a crash5.3 Medium
- imagemagickImageMagick: Heap Buffer Over-Write in GetVirtualPixels api will result in a crash5.1 Medium
- vmware fusion, workstation +1 moreVMware Workstation and Fusion VMXNET3 integer-overflow vulnerability9.3 Critical
- google chromeInteger overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to...9.6 Critical
- google chromeInteger overflow in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker...4.3 Medium
- google chromeInteger overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote...9.6 Critical
- sezero libmikmodlibmikmod before 3.3.14 Heap Buffer Overflow via OKT Loader OKT_doPBOD8.5 High
- sezero libmikmodlibmikmod before 3.3.14 Heap Buffer Overflow via DSM Loader Integer Overflow8.5 High
- gnu aspellInteger Truncation Leading to Heap Corruption in GNU Aspell1.8 Low
- mediatek mt6739 firmware, mt6761 firmware, mt6765 firmware +31 more +33 moreIn display, there is a possible escalation of privilege due to an integer overflow. This could...6.7 Medium
- Show moreLoading…