CWE-191: Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
Also known as Integer underflow.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- openldap foundation openldapOpenLDAP LMDB mdb_load Heap Buffer Underflow in readline()4.6 Medium
- color iccdeviccDEV has Out-of-bounds Read and Integer Underflow (Wrap or Wraparound)6.1 Medium
- silabs.com z-wave protocol controllerSilicon Labs Z-Wave Protocol Controller Integer underflow vulnerability leads to out of bounds read5.3 Medium
- gpsd project gpsd, red hat enterprise linux 10, enterprise linux 9 +2 moreAn integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of...7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Hyper-V Denial of Service Vulnerability5.3 Medium
- aiscatcher ais-catcherAIS-catcher Integer Underflow in MQTT Packet Parsing leading to Heap Buffer Overflow8.8 High
- asus routerAn integer underflow vulnerability has been identified in Aicloud. An authenticated attacker may...6.0 Medium
- wolfsslInteger Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt2.1 Low
- espressif esp-idfESP32-P4 JPEG Decoder Header Parsing Vulnerability6.9 Medium
- agronholm cbor2cbor2 C extension decoder flaws can cause denial of service7.5 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe illustrator on ipadIllustrator on iPad | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe illustrator on ipadIllustrator on iPad | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- imagemagickImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)4.7 Medium
- strongswanIn the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2...8.1 High
orx-pinned-veccrates.ioorx-pinned-vec has undefined behavior in index_of_ptr with empty slices2.0 Low- eclipse threadx usbx, eclipse foundation netx duo +1 moreInadequate bounds check and potential underflow in _ux_host_class_hid_report_descriptor_get()2.1 Low
- quickjsType confusion in string addition in QuickJS7.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +34 more +36 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.8 High
- linux, linux kernel +1 morei2c: rtl9300: ensure data length is within supported range7.1 High
- bmc control-m/agentBMC Control-M/Agent memory corruption in SSL/TLS communication8.4 High
- linux, linux kernel +1 morewifi: mwifiex: Fix OOB and integer underflow when rx packets8.8 High
- linux, linux kernel +1 moreipv6/addrconf: fix a potential refcount underflow for idev7.8 High
- nvidia triton inference serverNVIDIA Triton Inference Server for Windows and Linux and the Tensor RT backend contain a...4.4 Medium
- linux, linux kernel +1 moretcp: Correct signedness in skb remaining space calculation7.8 High
- honeywell c200e, c300 pcnt02, c300 pcnt05 +6 more +8 moreInteger underflow during processing of short network packets in CDA FTEB responder8.2 High
- honeywell c200e, c300 pcnt02, c300 pcnt05 +7 more +9 moreLack of buffer clearing before reuse may result in incorrect system behavior.9.4 Critical
- adobe incopyInCopy | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe framemakerAdobe Framemaker | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe framemakerAdobe Framemaker | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe illustratorIllustrator | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Graphics Component Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows MBT Transport Driver Elevation of Privilege Vulnerability7.8 High
- debian linux, linux kernel +1 morei40e: fix MMIO write access to an invalid page in i40e_clear_hw5.5 Medium
- debian linux, linux kernel +1 moreRDMA/mlx5: Fix error flow upon firmware failure for RQ destruction7.8 High
- preh car connect gmbh (joynext gmbh) volkswagen mib3 infotainment system mib3 oi mqbDenial of Service via integer underflow in picserver3.3 Low
- ibm informix dynamic serverIBM Informix Dynamic Server denial of service7.5 High
- espressif esp-idfESP-NOW Integer Underflow Vulnerability Advisory7.2 High
- linux, linux kernel +1 moredrm/sun4i: dsi: Prevent underflow when computing packet sizes5.5 Medium
- catdoc, debian linux +1 moreAn integer underflow vulnerability exists in the OLE Document DIFAT Parser functionality of...8.4 High
- valkeysetDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev->size ...3.1 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreLibsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup7.5 High
- zoom workplace, zoom communications, inc workplace apps, zoom meeting software development kit +4 more +6 moreZoom Workplace Apps - NULL Pointer Dereference6.5 Medium
- adobe bridgeBridge | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe animateAnimate | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe photoshop, photoshop desktop +1 morePhotoshop Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Kernel Information Disclosure Vulnerability5.7 Medium
- libxmpLibxmp through 4.6.2 has a stack-based buffer overflow in depack_pha in loaders/prowizard/pha.c...5.6 Medium
- dragonflydb dragonflyDragonflyDB Dragonfly through 1.28.2 allows authenticated users to cause a denial of service ...3.3 Low
- Show moreLoading…