CWE-191: Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
Also known as Integer underflow.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreMicrosoft Windows SCSI Class System File Information Disclosure Vulnerability6.5 Medium
- microsoft sql server 2017 (cu 31), sql server 2017 (gdr), sql server 2019 (cu 32) +9 more +11 moreMicrosoft SQL Server Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Remote Access Connection Manager Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreMicrosoft Standard XPS Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Kernel-Mode Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 morePush Message Routing Service Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreMicrosoft Standard XPS Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows GDI+ Elevation of Privilege Vulnerability8.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +17 more +19 moreWindows File History Service Elevation of Privilege Vulnerability6.4 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreMicrosoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability9.8 Critical
- sap se netweaver application server for abap and abap platformMemory Corruption vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform7.7 High
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8, directory server 11.9 for rhel 8 +20 more +22 more389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()7.5 High
- ibm iIBM i is Affected By Buffer Overflow Vulnerability []6.3 Medium
- themoos essential-moosMOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP Length8.7 High
- hickory-dnsHickory DNS from 0.26.0 before 0.26.2 Panic via TSIG RDATA Decoding8.7 High
- rockwell automation rslinx classic®RSLinx Classic® - Multiple Vulnerabilities8.7 High
- rockwell automation rslinx classic®RSLinx Classic® - Multiple Vulnerabilities8.7 High
- nasa cfsNASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflow5.3 Medium
- klever-io klever-goKlever-Go: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)9.6 Critical
- gitoxidelabs gitoxidegitoxide gix-packetline before 0.21.5 Denial of Service7.1 High
- watchguard fireware osFireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS)8.7 High
- watchguard fireware osFireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS)8.7 High
- watchguard fireware osFireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS)8.7 High
- watchguard fireware osFireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution9.3 Critical
- suse wickedwicked: integer underflow of the UDP length in ni_capture_inspect_udp_header() leads to an out-of-bounds read5.3 Medium
- nlnet labs nsdRemote TCP DoS by throttling the TCP receive window6.9 Medium
- adobe c2pa, c2pa tool, c2patool +1 more +3 moreCAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)6.2 Medium
- adobe c2pa, c2pa tool, c2patool +1 more +3 moreCAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)7.5 High
- adobe c2pa, c2pa tool, c2patool +1 more +3 moreCAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)6.2 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.2 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.8 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.5 High
- freebsdHeap out-of-bounds access in semctl(2)7.8 High
- netatalkNetatalk has Integer Underflow → Stack Buffer Overflow in deletedir()7.5 High
- linuxwifi: brcmfmac: cyw: fix heap overflow on a short auth frame8.8 High
- netatalkNetatalk has Integer Underflow → Stack Buffer Overflow in copydir()7.5 High
- capstone-engine capstoneCapstone M68K and RISCV `cs_insn_name()` invalid IDs can trigger out-of-bounds reads and process crashes5.1 Medium
- postgresqlPostgreSQL ECPG integer underflow can crash the client3.8 Low
- red hat enterprise linux 10, enterprise linux 9, redhat enterprise linux +2 moreOpen-iscsi: open-iscsi: integer underflow in iscsiuio ipv4 dhcp parsing6.5 Medium
- ibm iIBM i is Affected By Denial of Service Vulnerability []8.2 High
- red hat enterprise linux 10, enterprise linux 9, redhat enterprise linux +2 moreOpen-iscsi: open-iscsi: integer underflow in iscsiuio dhcpv6 parsing6.5 Medium
- gstreamer gst-plugins-good, gstreamer, red hat enterprise linux 10 +14 more +16 moreGstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write6.6 Medium
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreImproper Validation in MongoDB Queryable Encryption Maintenance Operation Leads to Denial of Service and Index Corruption7.1 High
- microsoft 365 apps, 365 apps for enterprise, office 2016 +9 more +11 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows DHCP Server Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows HTTP.sys Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows DHCP Server Information Disclosure Vulnerability6.5 Medium
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows DHCP Server Information Disclosure Vulnerability6.5 Medium
- Show moreLoading…