CWE-191: Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
Also known as Integer underflow.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- hickory-dns Hickory DNS from 0.26.0 before 0.26.2 Panic via TSIG RDATA Decoding 8.7 High
- gen digital avast antivirus, avast one, avast premium security, avast ultimate, avg antivirus free, avg internet security, avg ultimate, norton antivirus plus, norton 360 standard, norton 360 deluxe, norton 360 advanced +2 more Avast WFP stream parser integer underflow causes system crash No score
- signalwire freeswitch FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding 8.2 High
- signalwire freeswitch FreeSWITCH: Pre-authentication out-of-bounds write in MSRP message body parsing 7.5 High
- signalwire freeswitch FreeSWITCH: Out-of-bounds read in mod_rtmp H.264 video message parsing 7.5 High
- signalwire freeswitch FreeSWITCH: Stack buffer overflow parsing the SDP a=crypto key material on inbound calls 7.5 High
- g4klx dstargateway In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp... 9.2 Critical
- jorisvink kore Kore before 4.3.0 Integer Underflow Memory Exhaustion via http_header_recv() 8.7 High
- hathach tinyusb TinyUSB < 0.20.1 Integer Underflow via HID Report Descriptor Parser 5.2 Medium
- postgresql psqlodbc psqlODBC does not validate server-supplied counts and lengths 5.9 Medium
- postgresql psqlodbc psqlODBC row cache overflow when a later FETCH changes the column count 7.5 High
- mediatek, inc. mediatek chipset In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to... 6.7 Medium
- mediatek, inc. mediatek chipset In adsp, there is a possible out of bounds write due to an integer overflow. This could lead to... 6.7 Medium
- No product listed An integer underflow vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1... 7.5 High
- rt-labs p-net Integer underflow leads to out-of-bounds read in pf_cpm_c_data_ind() 7.1 High
- juniper networks session smart router Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsing 7.1 High
- apple ipados, macos, ios and ipados +1 more +3 more An integer underflow was addressed with improved input validation. This issue is fixed in iOS 26... 7.5 High
- rt-labs ab soem Multiple Out-of-Bounds Reads in Frame Processing 7.1 High
- rt-labs ab soem Memory Corruption via Integer Underflow in Message Length Validation 8.3 High
- apache software foundation traffic server Apache Traffic Server: HTTP/2 DATA frame padding underflow lets a client trigger backend worker-pool exhaustion 7.7 High
- apache software foundation brpc Apache bRPC: Integer Underflow in mcpack2pb Parser Leading to Denial of Service 7.5 High
- apache software foundation brpc Apache bRPC: Integer Underflow and Out-of-Bounds Read in HTTP/2 DATA Frame Parser 7.5 High
- eclipse foundation openj9 JITServer: Pre-authentication remote crash via integer underflow and out-of-bounds heap read in DataDescriptor deserialization 8.7 High
- eclipse foundation threadx - netx duo Out-of-bounds Read via a Zero-length TLS 1.3 Certificate Message in NetX Secure 8.7 High
- icculus smpeg smpeg through 2.0.0 Integer Underflow via stream_header in MPEGsystem.cpp 6.8 Medium
- freerdp FreeRDP 3.14.1 before 3.32.0 Integer Underflow in BMP Writer via Clipboard 7.2 High
- riot-os riot RIOT: DHCPv6 client _parse_reply() missing sub-option length check leads to size_t underflow and unbounded OOB heap read 9.8 Critical
- mz automation libiec61850 libIEC61850: Remote information disclosure in MMS file service via out-of-range initialPosition in fileOpen followed by fileRead 7.5 High
- automattic mongoose Mongoose: Unauthenticated remote heap out-of-bounds read in built-in TLS: off-by-one length check in mg_tls_recv_record() underflows recv_len to SIZE_MAX 7.5 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 more Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings) 6.5 Medium
- eclipse foundation threadx netx duo Out-of-bounds read via an empty signature BIT STRING in NetX Secure X.509 parsing 8.7 High
- zephyrproject zephyr Integer underflow of the radio-reported frame length causes an out-of-bounds write in the NXP KW41Z IEEE 802.15.4 driver 5.9 Medium
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: EX Series, MX Series, ACX Series: An attacker causes rpd heap memory disclosure when Rosen-MVPN data-MDT is enabled 5.3 Medium
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: SRX Series: An attacker causes a forwarding-plane outage when SVR vector routing is used 7.1 High
- juniper networks junos os Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Echo is enabled 9.3 Critical
- sahlberg libsmb2 libsmb2 through 6.2 Heap Out-of-Bounds Read via decode_acl Integer Underflow 7.1 High
- akamai guardicore platform agent An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system... 5.3 Medium
- microsoft windows server 2019, windows server 2019 (server core installation), windows server 2022 +2 more +4 more Windows Failover Cluster Denial of Service Vulnerability 7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Network Policy Server (NPS) Remote Code Execution Vulnerability 9.8 Critical
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +8 more +10 more Microsoft Office Excel Remote Code Execution Vulnerability 8.8 High
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +8 more +10 more Microsoft Office Excel Remote Code Execution Vulnerability 8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows NTFS Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Microsoft Bluetooth Driver Elevation of Privilege Vulnerability 8.0 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 more Microsoft Office Excel Information Disclosure Vulnerability 6.5 Medium
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +14 more +16 more Windows Installer Elevation of Privilege Vulnerability 7.0 High
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +8 more +10 more Microsoft Office Excel Remote Code Execution Vulnerability 8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 more Windows Storage Spaces Controller Elevation of Privilege Vulnerability 6.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Network Policy Server (NPS) Remote Code Execution Vulnerability 9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Domain Name Service Remote Code Execution Vulnerability 9.8 Critical
- Show olderLoading…