CWE-191: Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
Also known as Integer underflow.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- amazon freertos-plus-tcpInteger Underflow in ICMP Echo Reply Processing in FreeRTOS-Plus-TCP6.0 Medium
- wazuhWazuh: Multiple Heap-based NULL WRITE Buffer Underflows in parse_uname_string()6.5 Medium
- wazuhWazuh: Heap-based NULL WRITE Buffer Underflow in GetAlertData4.4 Medium
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreMD5 checksum creation may cause availability loss7.1 High
- mit kerberos 5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of...5.9 Medium
- linux, linux kernel +1 moretipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG7.5 High
- linux, linux kernel +1 moredrm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat7.8 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moreusb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()5.5 Medium
- linux, linux kernel +1 morewifi: mac80211: Fix static_branch_dec() underflow for aql_disable.5.5 Medium
- sbabic swupdateSWUpdate Integer Underflow in Multipart Upload Parser8.2 High
- nimiq nimiq-account, proof-of-stake +1 morenimiq-account: Vesting insufficient funds error can panic5.3 Medium
- rustls webpkirustls-webpki before 0.103.13 Panic via empty BIT STRING8.7 High
- miniupnp project miniupnpdminiupnpd Integer Underflow SOAPAction Header Parsing7.1 High
Microsoft.Native.Quic.MsQuic.OpenSSLNuGet,Microsoft.Native.Quic.MsQuic.SchannelNuGet +1 moreMsQuic has a Remote Elevation of Privilege Vulnerability9.8 Critical- adobe framemakerAdobe Framemaker | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe framemakerAdobe Framemaker | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Hyper-V Remote Code Execution Vulnerability7.3 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +9 more +11 moreWindows Storage Spaces Controller Elevation of Privilege Vulnerability7.8 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +16 more +18 moreXorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling7.8 High
- imagemagickImageMagick: Heap BufferOverflow write of single zero byte when parsing XML5.3 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet/x25: Fix overflow when accumulating packets7.5 High
- libexif project libexifIn libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote...4.0 Medium
- wolfsslInteger underflow in X.509 SAN parsing in wolfSSL2.3 Low
- wolfsslInteger underflow leads to out-of-bounds access in sniffer ChaCha decrypt path.2.1 Low
- mtrojnar osslsigncodeosslsigncode has an Integer Underflow in PE Page Hash Calculation Can Cause Out-of-Bounds Read5.5 Medium
- openprinting cupsCUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported`4.0 Medium
- nimiq core-rs-albatross, proof-of-stake +1 morenimiq/core-rs-albatross: Discovery handshake limit could underflow and later provoke a deterministic overflow panic7.5 High
- go-gitgo-git: Maliciously crafted idx file can cause asymmetric memory consumption5.0 Medium
- strongswanstrongSwan 4.5.0 < 6.0.5 EAP-TTLS AVP Parsing Integer Underflow8.7 High
- wolfsslInteger underflow leads to out-of-bounds access in sniffer AES-GCM/CCM/ARIA-GCM decrypt path2.1 Low
- wazuhWazuh Database Synchronization Vulnerable to Stack-based Buffer Overflow via snprintf Integer Underflow4.9 Medium
- libexif project libexiflibexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value...7.4 High
- gstreamer, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability7.8 High
- freerdpFreeRDP has a `size_t` underflow in ADPCM decoder leads to heap-buffer-overflow write6.5 Medium
- freerdpFreeRDP has an Integer Underflow in update_read_cache_bitmap_order Function of FreeRDP's Core Library3.1 Low
- lexborInteger Underflow in Lexbor ISO‑2022‑JP Encoder8.2 High
- google chromeInteger overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to...8.8 High
- exiv2Exiv2: Integer Underflow in LoaderNative::getData() Causes Heap Buffer Overflow2.7 Low
- golioth firmware sdkGolioth Firmware SDK < 0.22.0 LightDB State Out-of-Bounds Read6.3 Medium
- m2team nanazipNanaZip .NET Single-File Parser Integer Underflow Leads to Unbounded Allocation (DoS)5.1 Medium
pgvectorDebian,postgresql13-pgvectoropenSUSE,postgresql14-pgvectoropenSUSE +4 more +6 morepgvector buffer overflow in parallel HNSW index build8.1 High- silabs.com simplicity sdk, gecko sdkInteger underflow in Secure NCP host2.4 Low
- silabs.com gecko sdk, simplicity sdk +1 moreECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs2.3 Low
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreLibsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources6.5 Medium
- yokogawa electric corporation vnet/ip interface package, yokogawa vnet\/ip interface package +1 moreA vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric...6.0 Medium
- yokogawa electric corporation vnet/ip interface package, yokogawa vnet\/ip interface package +1 moreA vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric...6.0 Medium
- espressif esp-idfESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflow6.3 Medium
- linux, linux kernel +1 morevsock/virtio: fix potential underflow in virtio_transport_get_credit()5.5 Medium
- sumatrapdfreader sumatrapdfSumatraPDF's Integer Underflow in PalmDbReader Leads to Crash5.5 Medium
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- Show moreLoading…