CWE-191: Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
Also known as Integer underflow.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- kakadusoftware kakadu softwareA freed memory access vulnerability exists in the SVG Marker Element feature of Apple Safari's...8.1 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +28 more +30 moreBuffer overflow can occur while processing non-standard NAN message from user space. in...7.8 High
- linux kernel, canonical ubuntu linux, ubuntu shiftfs in the linux kernel +2 moreReference count underflow in shiftfs7.1 High
- leadtoolsAn exploitable integer underflow vulnerability exists in the CMP-parsing functionality of...8.8 High
- google androidIn nfc_ncif_decode_rf_params of nfc_ncif.cc, there is a possible out of bounds read due to an...5.5 Medium
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software SIP Inspection Denial of Service Vulnerability8.6 High
- suricata-ids suricataAn issue was discovered in Suricata 4.1.3. The function process_reply_record_v3 lacks a check for...7.5 High
- denx u-boot, opensuse leap, siemens ruggedcom rox mx5000 +10 more +12 moreIn Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to...7.8 High
- sleuthkit the sleuth kit, fedoraproject fedora +1 moreAn issue was discovered in The Sleuth Kit (TSK) 4.6.6. There is an off-by-one overwrite due to an...9.8 Critical
- schismtracker schism trackerAn issue was discovered in Schism Tracker through 20190722. There is an integer underflow via a...7.8 High
- denx u-boot, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 moreAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing...9.8 Critical
- denx u-boot, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 moreAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +37 more +39 morePossible integer underflow due to lack of validation before calculation of data length in 802.11...9.8 Critical
- videolan vlc media player, canonical ubuntu linux, debian linux +2 more +4 moreAn Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media...7.8 High
- cisco integrated management controller, unified computing system (management software), unified computing system +2 moreCisco Integrated Management Controller Denial of Service Vulnerability5.5 Medium
- videolan vlc, vlc media player, opensuse backports +2 more +4 moreAn Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.7.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +39 more +41 morePossible integer underflow can happen when calculating length of elementary stream map from...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearable, qualcomm mdm9206 firmware, mdm9607 firmware +39 more +41 morePossible integer underflow can happen when calculating length of elementary stream info from...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +29 more +31 moreImproper input validation on input data which is used to locate and copy the additional IEs in...9.8 Critical
- suricata-ids suricataAn issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the function...9.8 Critical
- qualcomm technologies, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +15 more +17 moreAn integer underflow may occur due to lack of check when received data length from...7.8 High
- kmplayer, fedoraproject fedora +1 moreKMPlayer Subtitles parser Heap Overflow Vulnerability7.8 High
- getcujo smart firewallAn exploitable integer underflow vulnerability exists in the mdnscap binary of the CUJO Smart...6.5 Medium
- tuxera ntfs-3g, redhat enterprise linux, enterprise linux eus +3 more +5 moreAn integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially...7.0 High
- rdesktop, debian linux +1 morerdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap...9.8 Critical
- rdesktop, debian linux +1 morerdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap...9.8 Critical
- rdesktoprdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap...9.8 Critical
- amazon freertos, web services freertos +1 moreAn issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0...8.1 High
- qualcomm, inc. snapdragon mobile, qualcomm qca9379 firmware, sd 205 firmware +23 more +25 moreImproper input validation in Bluetooth Controller function can lead to possible memory corruption...8.8 High
- cisco webex wrf player, webex business suite 31, webex business suite 32 +3 more +5 moreCisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities7.8 High
- atlantiswordprocessor atlantis word processorAn exploitable stack-based buffer overflow vulnerability exists in the JPEG parser of Atlantis...8.8 High
- fuji electric v-server, fujielectric v-server firmware +1 moreFuji Electric V-Server 4.0.3.0 and prior, An integer underflow vulnerability has been identified,...9.8 Critical
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- samsung, samsung sth-eth-250 firmware +1 moreAn exploitable integer underflow vulnerability exists in the ZigBee firmware update routine of...5.3 Medium
- mutt, neomutt, canonical ubuntu linux +1 more +3 moreAn issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in...9.8 Critical
- techsmith mp4v2In MP4v2 2.0.0, there is an integer underflow (with resultant memory corruption) when parsing...8.8 High
- remicoin project remicoinAn wrong logical check identified in the transferFrom function of a smart contract implementation...7.5 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreWhile processing a debug log event from firmware in all Android releases from CAF using the Linux...5.5 Medium
- untrusted project untrustedInteger underflow in untrusted7.5 High
- futurxeThe transferFrom function of a smart contract implementation for FuturXE (FXE), an Ethereum ERC20...7.5 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn the function csr_update_fils_params_rso(), insufficient validation on a key length can result...7.8 High
- qualcomm ipq4019 firmware, mdm9206 firmware, mdm9607 firmware +33 more +35 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile,...9.8 Critical
- qualcomm sd 410 firmware, sd 412 firmware, sd 415 firmware +16 more +18 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile...9.8 Critical
- qualcomm mdm9206 firmware, mdm9650 firmware, msm8909w firmware +23 more +25 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile,...9.8 Critical
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moredwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils...5.5 Medium
- jhead project jheadAn integer underflow bug in the process_EXIF function of the exif.c file of jhead 3.00 raises a...5.5 Medium
- ffmpegInteger underflow in the mov_read_default function in libavformat/mov.c in FFmpeg before 2.4.6...5.5 Medium
- busyboxarchival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to...5.5 Medium
- graphicsmagick, debian linux +1 moreGraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (excessive memory...6.5 Medium
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +5 more +7 moreInteger underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, -...7.5 High
- Show moreLoading…