CWE-191: Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
Also known as Integer underflow.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- libbpg project libbpgThe hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a...8.8 High
- multicorewareinc x265An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for...5.5 Medium
- capnprotoInteger underflow in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 might allow...9.8 Critical
- actian pervasive psql, zen +1 moreHeap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13 allows remote attackers to...9.8 Critical
- google android, qualcomm, inc. all qualcomm products +1 moreIn all Android releases from CAF using the Linux kernel, an integer underflow vulnerability...7.8 High
- debian linux, openvswitch, redhat openstack +2 more +4 moreIn Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message,...9.8 Critical
- tnef project tnefAn integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14. This...9.8 Critical
- debian linux, linux kernel +1 moreThe edge_bulk_in_callback function in drivers/usb/serial/io_ti.c in the Linux kernel before 4.10...4.6 Medium
- multicorewareinc x265 high efficiency video codingAn integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for...5.5 Medium
- adobe acrobat, reader, acrobat dc +1 more +3 moreAdobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and...7.8 High
- libtifftools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (integer...7.8 High
- gnome gdk-pixbuf, debian linux, fedoraproject fedora +2 moreInteger underflow in the load_resources function in io-icns.c in gdk-pixbuf allows context...7.1 High
- libgdInteger underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics...9.8 Critical
- graphicsmagick, debian linux, opensuse leap +1 more +3 moreInteger underflow in the parse8BIM function in coders/meta.c in GraphicsMagick 1.3.25 and earlier...7.5 High
- google androidInteger overflow in drivers/char/diag/diag_dci.c in the Qualcomm components in Android before...7.8 High
- lha for unix project for unixInteger underflow in header.c in lha allows remote attackers to have unspecified impact via a...9.8 Critical
- digium asterisk, certified asterisk, fedoraproject fedora +2 morechan_sip in Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and...5.9 Medium
- gnu grub2, fedoraproject fedora +1 moreMultiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to...6.9 Medium
- apache openoffice, libreoffice, canonical ubuntu linux +1 more +3 moreInteger underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the...6.8 Medium
- dell bsafe, bsafe crypto-c, bsafe ssl-c +2 moreInteger underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition Suite (MES...9.8 Critical
- videolan vlc media playerInteger underflow in the MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN...7.8 High
- gnupg, gnupg libksba, canonical ubuntu linux +2 more +4 moreInteger underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG,...7.5 High
- redhat tcpdump, canonical ubuntu linux, opensuse +1 more +3 moreMultiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in...5.0 Medium
- adobe flash player, google chrome, opensuse +6 more +8 moreInteger underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0...9.8 Critical
- canonical ubuntu linux, debian linux, opensuse +1 more +3 moreInteger underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context...5.0 Medium
- pixman, canonical ubuntu linux, debian linux +7 more +9 moreInteger underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0, as...5.0 Medium
- ffmpegInteger underflow in the asfrtp_parse_packet function in libavformat/rtpdec_asf.c in FFmpeg...6.8 Medium
- linux kernelInteger underflow in the l2cap_config_req function in net/bluetooth/l2cap_core.c in the Linux...8.3 High
- linux kernel, fedoraproject fedora +1 moreInteger underflow in the dccp_parse_options function (net/dccp/options.c) in the Linux kernel...7.5 High
- linux kernelInteger underflow in the irda_getsockopt function in net/irda/af_irda.c in the Linux kernel...2.1 Low
- debian linux, linux kernel, opensuse +4 more +6 moreMultiple integer underflows in the x25_parse_facilities function in net/x25/x25_facilities.c in...7.8 High
- freetype, apple mac os x, debian linux +2 moreInteger underflow in glyph handling in FreeType before 2.4.0 allows remote attackers to cause a...6.8 Medium
- apache openoffice, canonical ubuntu linux, debian linux +2 moreInteger underflow in filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote...9.3 High
- vmware ace, player, server +3 more +5 moreInteger underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x...10.0 High
- aol aimThe GIF parser in ateimg32.dll in AOL Instant Messenger (AIM) 5.9.3797 and earlier allows remote...7.5 High
- barton ngircdInteger underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows...9.8 Critical
- samba ppp, canonical ubuntu linux +1 moreInteger underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of...7.5 High
- linux kernelInteger underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote...7.5 High
- tcpdumpInteger underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to...5.0 Medium