CWE-191: Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
Also known as Integer underflow.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows iSCSI Service Denial of Service Vulnerability7.5 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn wlan driver, there is a possible missing bounds check. This could lead to local denial of...5.5 Medium
- openvswitch, debian linux +1 moreAn integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.9.8 Critical
- google androidIn rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out of bounds read due to...7.5 High
- google androidIn several functions that parse avrc response in avrc_pars_ct.cc and related files, there are...7.5 High
- schneider electric legacy modicon quantum/premium, modicon m340 cpu (part numbers bmxp34*), modicon m580 cpu (part numbers bmep* and bmeh*) +50 more +52 moreA CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial...7.5 High
- azure-rtos filex, microsoft azure rtos filex +1 moreAzure RTOS FileX vulnerable to Buffer Offerflow5.6 Medium
- qemu, fedoraproject fedora +1 moreAn integer underflow issue was found in the QEMU VNC server while processing ClientCutText...6.5 Medium
- azure-rtos usbx, eclipse threadx usbx +1 moreAzure RTOS USBX Host PIMA vulnerable to read integer underflow with buffer overflow8.6 High
- azure-rtos usbx, eclipse threadx usbx +1 moreUSBX Host CDC ECM integer underflow with buffer overflow7.6 High
- whatsapp, facebook whatsapp business for android, whatsapp business for ios +2 more +4 moreAn integer underflow in WhatsApp could have caused remote code execution when receiving a crafted...7.8 High
- google androidIn extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read...5.5 Medium
- softing secure integration server, edgeaggregator, edgeconnector +3 more +5 moreSofting Secure Integration Server Integer Underflow7.5 High
- libtiff, debian linux, fedoraproject fedora +2 morelibtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in...5.5 Medium
- libtiff, debian linux, fedoraproject fedora +2 morelibtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write...5.5 Medium
- bestwebsoft rating, rating by bestwebsoft +1 moreRating by BestWebSoft < 1.6 - Rating Denial of Service6.5 Medium
- gnu project grub, gnu grub2 +1 moreInteger underflow in grub_net_recv_ip4_packets8.1 High
- zangband-data project zangband-dataZAngband zangband-data 2.7.5 is affected by an integer underflow vulnerability in src/tk/plat.c...9.8 Critical
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreAn integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G...6.7 Medium
- google tensorflowMissing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2`5.5 Medium
- causefx causefx/organizr, organizr +1 moreAllowing long password leads to denial of service in causefx/organizr9.9 Critical
- trendnet teg-30102ws firmware, ti-g102i firmware, ti-g160i firmware +6 more +8 moreThe TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from an integer...9.8 Critical
- trendnet teg-30102ws firmware, ti-g102i firmware, ti-g160i firmware +6 more +8 moreThe TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from an integer...9.8 Critical
- fisglobal gt.mAn issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using...7.5 High
- yottadb, fisglobal gt.m +1 moreAn issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can...7.5 High
- google android, mediatek, inc. mt2601, mt6580, mt6735, mt6739, mt6761, mt6763, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6799, mt6833, mt6873, mt6877, mt6885, mt6893, mt8163, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8183, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8667, mt8675, mt8695, mt8696, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn preloader (usb), there is a possible out of bounds write due to a integer underflow. This...6.6 Medium
- huawei emui, magic ui +1 moreThere is an integer underflow vulnerability in the atcmdserver module. Successful exploitation of...7.5 High
- blender, debian linux +1 moreAn integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly...5.5 Medium
- sonos one speaker, s1, s2 +2 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...9.8 Critical
- microsoft windows 10 version 1809, windows 10 version 1909, windows 10 version 20h2 +10 more +12 moreNamed Pipe File System Elevation of Privilege Vulnerability7.8 High
- neutrinolabs xrdp, fedoraproject fedora +1 morePrivilege escalation on xrdp7.8 High
- xen, debian linux, fedoraproject fedora +2 moreA PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was...5.5 Medium
- linux kernel, netapp h300e firmware, h300s firmware +6 more +8 moreImportant: kernel security and bug fix update8.4 High
- parity frontierInteger underflow in Frontier6.5 Medium
- stars rating project rating, unknown stars rating +1 moreStars Rating < 3.5.1 - Comments Denial of Service7.5 High
- teluu pjsip, asterisk certified asterisk, debian linux +2 more +4 morePotential integer underflow upon receiving STUN message in PJSIP7.3 High
- apache plc4xApache PLC4X 0.9.0 Buffer overflow in PLC4C via crafted server response8.8 High
- mitsubishielectric ezsocket, gx works2, melsoft navigator +2 moreInteger Underflow vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior,...5.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInteger underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to...8.8 High
- implecode reviews plusReviews Plus < 1.2.14 - Subscriber+ Reviews DoS6.5 Medium
- siemens capital embedded ar classic 431-422, capital embedded ar classic r20-11, pluscontrol 1st gen +11 more +13 moreA vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC)...7.5 High
- google tensorflowCrash in `max_pool3d` when size argument is 0 or negative5.5 Medium
- zephyrproject zephyrInteger Underflow in 6LoWPAN IPHC Header Uncompression in Zephyr8.3 High
- zephyrproject zephyrInteger Underflow in Zephyr in IEEE 802154 Fragment Reassembly Header Removal7.5 High
- wazuhWazuh Manager in Wazuh through 4.1.5 is affected by a remote Integer Underflow vulnerability that...6.5 Medium
- ribbonsoft dxflib, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreA code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of...8.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +169 more +171 moreInteger underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto,...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +153 more +155 moreInteger underflow can occur when the RTCP length is lesser than than the actual blocks present in...9.8 Critical
- att xmillA memory corruption vulnerability exists in the XML-parsing CreateLabelOrAttrib functionality of...8.1 High
- Show moreLoading…