CWE-191: Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
Also known as Integer underflow.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- libbiosig project libbiosig, fedoraproject fedora +1 moreAn integer underflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig...9.8 Critical
- qemuBuffer Overflow vulnerability in Qemu before v.8.2.0 allows a remote attacker to execute...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInteger underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to...9.8 Critical
- linux kernel, netapp ontap tools, red hat enterprise linux 6 +8 more +10 moreKernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client6.8 Medium
- microsoft windows 11 version 21h2, windows 11 version 22h2, windows 11 version 22h3 +7 more +9 moreWindows Kernel-Mode Driver Elevation of Privilege Vulnerability7.8 High
- gtkwaveMultiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation...7.0 High
- gtkwaveMultiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation...7.0 High
- clickhouse, clickhouse cloud +1 moreInteger underflow leading to stack overflow in FPC codec decompression5.9 Medium
- gpsdAn integer overflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1...5.9 Medium
- 7-zip, netapp active iq unified manager, oncommand workflow automation +2 more7-Zip through 22.01 on Linux allows an integer underflow and code execution via a crafted 7Z...7.8 High
- videolan vlc media playerVideolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect...7.5 High
- qualcomm 315 5g iot modem firmware, 8098 firmware, 8953pro firmware +257 more +259 moreBuffer Copy Without Checking Size of Input in Audio7.8 High
- zephyrproject zephyrPotential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem6.3 Medium
- softether vpnAn integer underflow vulnerability exists in the vpnserver OvsProcessData functionality of...7.5 High
- microsoft odbc driver for sql server, sql server, odbc driver 17 for sql server on linux +9 more +11 moreMicrosoft ODBC Driver for SQL Server Remote Code Execution Vulnerability7.8 High
- consensys gnarkgnark vulnerable to unsoundness in variable comparison/non-unique binary decomposition7.1 High
- accusoft imagegearAn out-of-bounds write vulnerability exists in the dcm_pixel_data_decode functionality of...9.8 Critical
- microsoft .net, .net 6.0, .net 7.0 +25 more +27 moreVisual Studio Remote Code Execution Vulnerability7.8 High
- microsoft .net, .net 6.0, .net 7.0 +23 more +25 moreVisual Studio Remote Code Execution Vulnerability7.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +6 more +8 moreDHCP Server Service Denial of Service Vulnerability7.5 High
- freerdp, debian linux, fedoraproject fedora +2 moreInteger-Underflow leading to Out-Of-Bound Read in FreeRDP5.3 Medium
- freerdp, debian linux, fedoraproject fedora +2 moreIncorrect offset calculation leading to denial of service in FreeRDP5.9 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreWindows Bluetooth A2DP driver Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreMicrosoft Message Queuing (MSMQ) Denial of Service Vulnerability6.5 Medium
- linux kernel, netapp h300s, h410s +2 more +4 moreAn issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an...9.8 Critical
- microsoft 365 apps, 365 apps for enterprise, office 2019 for mac +5 more +7 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft odbc driver 17 for sql server on linux, odbc driver 17 for sql server on macos, odbc driver 17 for sql server on windows +13 more +15 moreMicrosoft ODBC and OLE DB Remote Code Execution Vulnerability7.8 High
- libjxl project libjxlAn issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow...7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability9.8 Critical
- riot-os riotRIOT-OS vulnerable to Out of Bounds write in routing with SRH7.5 High
- maradns, debian linux, fedoraproject fedora +2 moreMaraDNS Integer Underflow Vulnerability in DNS Packet Decompression7.5 High
- riot-os riotRIOT-OS vulnerable to Integer Underflow during defragmentation7.5 High
- riot-os riotRIOT-OS vulnerable to Integer Underflow during IPHC receive7.5 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-19832: Adobe Acrobat Reader DC Doc Object Integer Underflow Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +6 more +8 moreWindows Network File System Information Disclosure Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +49 more +51 moreInteger Overflow in Multimedia Framework8.4 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +21 more +23 moreMicrosoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability4.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreMicrosoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreRemote Procedure Call Runtime Remote Code Execution Vulnerability9.8 Critical
- google android, mediatek, inc. mt6580, mt6731, mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8185, mt8321, mt8385, mt8666, mt8667, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797 +1 moreIn keyinstall, there is a possible information disclosure due to an integer overflow. This could...4.4 Medium
- microsoft visual studio 2013 update 5, visual studio 2015 update 3, visual studio 2017 version 15.9 (includes 15.0 - 15.8) +7 more +9 moreVisual Studio Remote Code Execution Vulnerability7.8 High
- microsoft sql server, sql server 2008 r2 service pack 3 (qfe), sql server 2008 service pack 4 (qfe) +11 more +13 moreMicrosoft ODBC Driver for SQL Server Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn wlan driver, there is a possible missing params check. This could lead to local denial of...5.5 Medium
- linux kernelA use-after-free flaw was found in io_uring/filetable.c in io_install_fixed_file in the io_uring...5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- Show moreLoading…