CWE-191: Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
Also known as Integer underflow.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft 365 apps, 365 apps for enterprise, office 2016 +9 more +11 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows DHCP Server Information Disclosure Vulnerability6.5 Medium
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows DHCP Server Information Disclosure Vulnerability6.5 Medium
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows DHCP Server Information Disclosure Vulnerability6.5 Medium
- microsoft windows server 2012 r2, windows server 2012 r2 (server core installation), windows server 2016 +9 more +11 moreWindows DHCP Server Information Disclosure Vulnerability6.5 Medium
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows DHCP Server Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows Program Compatibility Assistant Service Elevation of Privilege Vulnerability7.8 High
- adobe c2pa, c2pa-web, c2patool +3 more +5 moreCAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)6.2 Medium
- adobe c2pa, c2pa-web, c2patool +3 more +5 moreCAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)6.2 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGimp: gimp: arbitrary code execution in psd plugin due to unsigned underflow8.4 High
- linuxopenvswitch: fix GSO userspace truncation underflow9.8 Critical
- timescale timescaledbTimescaleDB 2.29.1 Out-of-Bounds Read DoS via Gorilla Compression Reverse Iterator7.1 High
- ggml llama.cppllama.cpp b3978–b9058 Integer Underflow via DRY Sampler8.5 High
- rpm-software-management popt, red hat enterprise linux 10, enterprise linux 6 +7 more +9 morePopt-devel: popt-static: size_t underflow in singleoptionhelp2.2 Low
- kosinix rasterraster - Integer Underflow in crop() Offset Handling Causes Capacity-Overflow Panic7.5 High
- freerdpFreeRDP 3.28.0 Heap Buffer Overflow via RAIL orderLength Underflow8.7 High
- strukturag libheiflibheif: Integer underflow in Fraction constructor via double clap transform application4.3 Medium
- o6 automation open62541o6 Automation open62541 Integer Underflow8.2 High
- autel maxicharger ac elite homeAutel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability8.1 High
- gopacketGoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS)6.9 Medium
- xenbuffer overruns in libfsimage iso9660 handling5.5 Medium
- erlang erts, otp, erlang\/otp +2 moreBEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding8.2 High
- linux, linux kernel +1 morerust_binder: use a u64 stride when cleaning up the offsets array8.8 High
- linux, linux kernel +1 morehfs/hfsplus: fix u32 overflow in check_and_correct_requested_length7.8 High
- libssh2libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation8.7 High
- apache nimbleApache NimBLE: Incorrect data validation in BASS add/modify source operation8.8 High
- fluidsynthFluidSynth: SF2 DMOD Chunk Unsigned Underflow6.2 Medium
- ffmpegFFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten Decoder7.3 High
- linux, linux kernel +1 morenet: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring9.8 Critical
- linux, linux kernel +1 morexfrm: Check for underflow in xfrm_state_mtu7.8 High
- linux, linux kernel +1 moreKVM: SEV: Ignore Port I/O requests of length '0'9.3 Critical
- linux, linux kernel +1 morenet: garp: fix unsigned integer underflow in garp_pdu_parse_attr5.5 Medium
- wazuhWazuh : size_t underflow in msgs.c ReadSecMSG causes wazuh-remoted DoS and potential heap overflow via crafted agent message6.5 Medium
- absolute secure accessInteger underflow vulnerability in Secure Access clients2.1 Low
- absolute secure accessInteger underflow in Secure Access clients prior to 14.552.1 Low
- adobe c2pa, c2pa-web, c2patool +3 more +5 moreCAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)6.2 Medium
- adobe c2pa, c2pa-web, c2patool +3 more +5 moreCAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)6.2 Medium
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows NTFS Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows DWM Core Library Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows NTFS Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability7.3 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DHCP Client Elevation of Privilege Vulnerability7.5 High
- microsoft malware protection engineMicrosoft Defender Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability8.8 High
- opener project openerOpENer 2.3.0 (master branch up to commit 76b95cf) is vulnerable to a severe memory corruption...9.8 Critical
- denx u-bootU-Boot 2026.04-rc3 Integer Underflow DoS via tcp_rx_state_machine()8.7 High
- openwrtOpenWrt: EAD Integer Underflow → Pre-Auth Denial of Service6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 moreGlib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"7.5 High
- Show moreLoading…