CWE-190: Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Also known as Overflow, Wraparound, wrap, wrap-around, wrap around.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- fasterxml jackson-dataformat-protobufjackson-dataformat-protobuf: integer overflow in ProtobufParser._readStringKey() allows OutOfMemoryError from an 8-byte payload7.5 High
- musl -libc muslmusl libc before 1.2.7, when an untrusted regular expression is used with regcomp, has multiple...8.1 High
- No product listedAn integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack v0.11.0 allows...7.5 High
- fasterxml jackson-dataformat-protobufjackson-dataformat-protobuf: signed integer overflow in string-length paths allows unbounded array allocation and OutOfMemoryError7.5 High
- google chromeMemory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...4.3 Medium
- google chromeMemory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...9.6 Critical
- google chromeImproper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote...8.8 High
- the epics community epics baseInteger overflow or wraparound in EPICS Base8.8 High
- the epics community epics baseInteger overflow or wraparound in EPICS Base9.3 Critical
- watchguard fireware osFireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write9.2 Critical
- teamviewer full client, portable, remote control +2 moreInteger Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow8.8 High
- mozilla firefox, thunderbird +1 moreInteger overflow, use-after-free in the Graphics: Text component8.8 High
- mozilla firefox, thunderbird +1 moreInteger overflow in the Graphics: Text component8.8 High
- greyclab cimgGreycLab CImg through 4.0.6 Heap Out-of-Bounds Read via Integer Overflow in _load_bmp()6.9 Medium
- ggml-org llama.cppllama.cpp b5854 before b11275 Integer Overflow in gguf_init_from_reader6.9 Medium
- ggml-org llama.cppllama.cpp b10398 before b11301 Integer Overflow in gguf_init_from_reader6.9 Medium
- klauspost compresscompress zstd: Panic on two-block frames8.7 High
- dvidelabs flatccflatcc through 0.6.4 Out-of-Bounds Read via verifier check_header6.3 Medium
- fltkFLTK through 1.4.5 Heap Buffer Overflow via Fl_BMP_Image Integer Overflow8.5 High
- apple visionosAn integer overflow was addressed with improved input validation. This issue is fixed in visionOS...7.8 High
- apple ipados, macos, visionos +2 more +4 moreAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7...7.5 High
- apple macosAn integer overflow was addressed with improved input validation. This issue is fixed in macOS...6.2 Medium
- apple macosAn integer overflow was addressed with improved input validation. This issue is fixed in macOS...7.5 High
- apple ipados, macos, tvos +4 more +6 moreAn integer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27.2...5.5 Medium
- apple macosAn integer overflow was addressed with improved input validation. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, visionos +2 more +4 moreAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7...7.5 High
- apple ipados, macos, ios and ipados +1 more +3 moreAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7...8.8 High
- No product listedqiujie mall-server 0.0.1-SNAPSHOT contains an integer overflow in CartServiceImpl that allows an...5.4 Medium
- rclonerclone serve s3 1.75.0 before 1.75.2 Memory Limit Bypass via Multipart Overflow6.9 Medium
- imagemagickImageMagick before 7.1.2-33 Heap Buffer Overflow via Convex-Hull on 32-bit2.0 Low
- o6 automation gmbh open62541open62541 1.5.0 before 1.5.7 Integer Overflow Heap Buffer Overflow via Custom DataType9.2 Critical
- sahlberg libsmb2libsmb2 before 6.3 Integer Overflow in DCE/RPC NDR Decoder via NetrShareEnum7.2 High
- mongodb c driverHeap overflow via 32-bit length wrap of the URI username in Windows Kerberos auth message wrapping5.7 Medium
- apache software foundation datasketchesApache DataSketches: datasketches-cpp: Out-of-bounds read and write in Count-Min sketch deserialization allows memory corruption via a crafted sketch5.3 Medium
- gitlabInteger Overflow or Wraparound in GitLab10.0 Critical
- python pillowPillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise6.5 Medium
- qtNull-pointer dereference in QTriangulator reachable through VectorImage4.0 Medium
- eclipse foundation openj9JITServer: Pre-authentication remote Denial of Service via integer overflow infinite loop in MessageBuffer::computeRequiredCapacity()8.7 High
- google chromeUse after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote...6.5 Medium
- academysoftwarefoundation openimageioOpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 Cineon Reader Heap Out-of-Bounds Read6.8 Medium
- eclipse foundation threadxModule object allocation size overflow corrupts the manager object pool7.0 High
- eclipse foundation threadx - guixGUIX binary resource loader: unvalidated glyph range causes an integer underflow and a heap out-of-bounds write when loading an untrusted font or theme7.1 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the SVG component9.8 Critical
- advantech adam-3600An integer overflow vulnerability in the license manager service could allow an unauthenticated...6.9 Medium
- qtQBinaryJson::fromBinaryData() integer overflow leading to OOB read4.3 Medium
- apple macosAn integer underflow was addressed with improved input validation. This issue is fixed in macOS...5.9 Medium
- mikrotik routerosMikroTik RouterOS ipt_SAME.ko same_check integer overflow7.1 High
- tencent ncnnTencent ncnn Conversion API mat_pixel.cpp yuv420sp2rgb integer overflow5.3 Medium
- spatialite libspatialitelibspatialite through 5.1.0 Integer Overflow in WKB Geometry Parsing6.9 Medium
- Show moreLoading…