CWE-191: Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
Also known as Integer underflow.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- nvidia jetson agx xavier series, jetson xavier nx, jetson tx2 series, jetson tx2 nx, jetson nano, jetson nano 2gb, jetson tx1, jetson linux, shield tv +1 more +3 moreNVIDIA Linux kernel distributions contain a vulnerability in FuSa Capture (VI/ISP), where integer...7.3 High
- huawei emui, magic ui +1 moreThere is an Integer Underflow (Wrap or Wraparound) Vulnerability in Huawei Smartphone.Successful...7.5 High
- oracle mysql server, netapp oncommand insight +1 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...5.9 Medium
- weidmueller ie-wl-bl-ap-cl-eu firmware, ie-wl-bl-ap-cl-us firmware, ie-wl-vl-ap-br-cl-eu firmware +7 more +9 moreWEIDMUELLER: WLAN devices affected by Denial-of-Service vulnerability7.5 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 moreWindows NTFS Elevation of Privilege Vulnerability7.8 High
- academysoftwarefoundation openexrAn integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0...5.5 Medium
- microsoft office, 365 apps, excel +10 more +12 moreMicrosoft Office Information Disclosure Vulnerability5.5 Medium
- moxa vport 06ec-2v26m firmware, vport 06ec-2v36m-ct-t firmware, vport 06ec-2v36m-ct firmware +13 more +15 moreAn integer underflow was discovered in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series,...7.5 High
- moxa vport 06ec-2v26m firmware, vport 06ec-2v36m-ct-t firmware, vport 06ec-2v36m-ct firmware +13 more +15 moreImproper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V...7.5 High
- academysoftwarefoundation openexr, debian linux, fedoraproject fedora +2 moreAn integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR...5.5 Medium
- the xorg project xorg-x11-server, debian linux, fedoraproject fedora +2 more +4 moreA flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in...7.8 High
- fatek winproladderThe Fatek Automation WinProladder Versions 3.3 and prior are vulnerable to an integer underflow,...7.8 High
- contiki-os contikiAn issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of...7.5 High
- gnome gdk-pixbuf, fedoraproject fedora +1 moreA flaw was found in gdk-pixbuf in versions before 2.42.0. An integer wraparound leading to an out...8.8 High
- zcfees project zcfeesAn integer underflow has been found in the latest version of ZCFees. The variables 'currPeriodIdx...7.5 High
- accel-pppVariable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length field is less than 2. It has an impact only when the attacker controls the RADIUS s…9.8 Critical
- openldap, apple mac os x, macos +4 more +6 moreAn integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the...7.5 High
- openldap, apple macos, debian linux +3 more +5 moreAn integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +504 more +506 morePossible out of bound memory access in audio due to integer underflow while processing modified...9.8 Critical
- bam project bamLoading a bgzip block can write out of bounds if size overflows.9.8 Critical
- ethereum go ethereum, go-ethereum +1 moreDenial of service in geth6.5 Medium
- arm armv8-m firmwareIn Arm software implementing the Armv8-M processors (all versions), the stack selection mechanism...7.8 High
- qualcomm qcs603 firmware, qcs605 firmware, sa6145p firmware +11 more +13 moreu'Out of Bound issue in DSP services while processing received arguments due to improper...7.8 High
- mikrotik routerosAn integer underflow in the SMB server of MikroTik RouterOS before 6.45.5 allows remote...7.5 High
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +1 more +3 moreAn integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc`...3.3 Low
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +48 more +50 moreu'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq5018 firmware, ipq6018 firmware +17 more +19 moreu'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as...9.8 Critical
- mz automation libiec61850Heap buffer overflow in libIEC618507.7 High
- the xorg project xorg-x11-server, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreA flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to...7.8 High
- the xorg project xorg-x11-server, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreA flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to...7.8 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...7.5 High
- the xorg project xorg-x11-server, x.org x server, canonical ubuntu linux +1 more +3 moreA flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension...7.8 High
- lua, debian linux, fedoraproject fedora +2 moreldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal,...5.3 Medium
- freediameterAn exploitable denial of service vulnerability exists in the freeDiameter functionality of...7.5 High
- artifex ghostscript, canonical ubuntu linux, opensuse leap +2 moreA memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard...9.8 Critical
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....7.5 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +19 more +21 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- palo alto networks pan-osPAN-OS: Integer underflow in the management interface4.9 Medium
- treck tcp\/ipThe Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow.5.3 Medium
- treck tcp\/ipThe Treck TCP/IP stack before 6.0.1.66 has an Ethernet Link Layer Integer Underflow.6.3 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +19 more +21 moreA memory corruption vulnerability exists when Windows Media Foundation improperly handles objects...8.8 High
- netapp active iq unified manager, oncommand insight, oncommand workflow automation +6 more +8 morenapi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0,...8.1 High
- contiki-ng, contiki-os contiki +1 moreAn issue was discovered in Contiki-NG through 4.2 and Contiki through 3.0. A buffer overflow is...7.5 High
- google androidAn issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.x) software. There...9.8 Critical
- gnu glibc, debian linux, fedoraproject fedora +3 more +5 moreAn exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU...8.1 High
- google androidAn issue was discovered on Samsung mobile devices with O(8.x) (Qualcomm chipsets) software. There...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm qcn7605 firmware, qcs605 firmware +7 more +9 morePossible Integer underflow in WLAN function due to lack of check of data received from user side...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +35 more +37 moreWhile parsing Service Descriptor Extended Attribute received as part of SDF frame, there is a...9.8 Critical
- moxa, moxa awk-3131a firmware +1 moreAn exploitable denial-of-service vulnerability exists in ServiceAgent functionality of the Moxa...7.5 High
- clickhouseIn all versions of ClickHouse before 19.14, an OOB read, OOB write and integer underflow in...9.8 Critical
- Show moreLoading…