CWE-191: Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
Also known as Integer underflow.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- nmapNmap - Integer Underflow in IPv6 Extension Header Parsing6.9 Medium
- sahlberg libnfslibnfs through 6.0.2 before 935b8db has an xid integer underflow in READ_IOVEC in...7.1 High
- wolfsslInteger underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info1.0 Low
- vimVim: Out-of-bounds Read with libsodium-encrypted Files5.5 Medium
- linux, linux kernel +1 morestaging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction8.1 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreIB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morethunderbolt: Reject zero-length property entries in validator5.5 Medium
- linux, linux kernel +1 morefs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START7.8 High
- linux, linux kernel +1 morebatman-adv: fix tp_meter counter underflow during shutdown7.8 High
- rti connext microInteger Underflow (Wrap or Wraparound) vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers.8.8 High
- driftregion iso14229iso14229 Integer Underflow and Out-of-Bounds Read in Handle_0x27_SecurityAccess()7.8 High
- liambindle mqtt-cMQTT-C Heap Out-of-Bounds Read and Integer Underflow in mqtt_unpack_publish_response()7.8 High
- m2team nanazipNanaZip: Heap out-of-bounds read in NanaZip AVB property descriptor parser via unsigned integer underflow5.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreKrb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read5.0 Medium
- alanxz rabbitmq-crabbitmq-c: size_t underflow in AMQP frame length computation leads to out-of-bounds read6.5 Medium
- taosdata tdengineTDengine has an integer underflow in uvConnMayGetUserInfo() allows unauthenticated remote crash (DoS)7.5 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +8 more +10 moreWindows Performance Monitor Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreNT OS Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft 365 apps, 365 copilot, 365 apps for enterprise +11 more +13 moreMicrosoft Office Remote Code Execution Vulnerability8.4 High
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: smd5 password storage plugin salt length integer underflow crash4.9 Medium
- comodo internet security, xcitium client security (xcs), xcitium (formerly comodo security solutions) comodo internet security +2 moreXcitium Client Security / Comodo Internet Security Remote Denial of Service8.7 High
- ashlar-vellum graphiteGraphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite...7.3 High
- wireapp wire-ioswire-ios has Persistent Remote DoS via Integer Underflow6.5 Medium
- mosaic5g flexricFlexRIC v2.0.0 uses a uint16_t counter for xapp_id assignment but stores the value in uint32_t...7.5 High
- qualcomm aqt1000 firmware, ar8035 firmware, csra6620 firmware +142 more +144 moreInteger Underflow (Wrap or Wraparound) in WLAN Host6.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredm-thin: fix metadata refcount underflow7.8 High
- struktur libheiflibheif: heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow7.1 High
- linux, linux kernel +1 moreerofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()7.1 High
- linux, linux kernel +1 moreapparmor: avoid per-cpu hold underflow in aa_get_buffer5.5 Medium
- mediaarea mediainfolibMediaArea MediaInfoLib LXF parsing heap-based buffer overflow vulnerability7.8 High
- netatalkInteger underflow in volxlate3.4 Low
- netatalkInteger underflow in dsi_writeinit() leads to denial of service7.5 High
- hamba avro, red hat cryostat 4 on rhel 9, multicluster global hub 1.4.5 +11 more +13 moreiskorotkov/avro: Integer Overflow in Avro Decoder8.7 High
- imagemagickImageMagick: Heap Buffer Over-Read in IPTC encoder5.1 Medium
- leont crypt::argon2, crypt\ +1 moreCrypt::Argon2 versions from 0.017 before 0.031 for Perl perform a heap out-of-bounds read in argon2_verify on empty encoded input5.3 Medium
- adobe c2pa, c2pa-web, content credentials js sdk +1 more +3 moreCAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)6.2 Medium
- adobe c2pa, c2pa-web, content credentials js sdk +1 more +3 moreCAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)6.2 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- identd-ng pam authnftpam_authnft: Heap buffer overflow in NETLINK_SOCK_DIAG reply walker8.7 High
- linux, linux kernel +1 morebtrfs: fix transaction abort on set received ioctl due to item overflow5.5 Medium
- linux, linux kernel +1 moremedia: chips-media: wave5: Fix PM runtime usage count underflow5.5 Medium
- owasp modsecurityModSecurity: Unsigned integer underflow in @verifySSN / @verifyCPF / @verifySVNR operators8.2 High
- linux, linux kernel +1 morexfs: delete attr leaf freemap entries when empty8.8 High
- linux, linux kernel +1 moreEFI/CPER: don't dump the entire memory region5.5 Medium
- osrg gobgposrg GoBGP mrt.go parseRibEntry integer underflow6.9 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreAn integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a...7.5 High
- No product listedInteger underflow vulnerability in Open-SAE-J1939 thru commit...9.8 Critical
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +32 more +34 moreGnutls: gnutls: denial of service via dtls zero-length fragment7.5 High
- amazon freertos-plus-tcpInteger Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP7.2 High
- Show moreLoading…