CWE-191: Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
Also known as Integer underflow.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +9 more +11 moreWindows WLAN Service Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Bluetooth A2DP driver Elevation of Privilege Vulnerability8.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Event Tracing Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreMicrosoft PowerShell Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Kerberos Elevation of Privilege Vulnerability7.8 High
- red hat enterprise linux 6, hardened images +1 moreBusybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial of service6.5 Medium
- xenArm: multiple issues with GNTTABOP_cache_flush7.5 High
- xenArm: multiple issues with GNTTABOP_cache_flush7.5 High
- huawei openbmcHuawei malicious on-bus PLDM or NCSI device can drive out-of-bounds-heap reads via short MCTP responses3.5 Low
- siemens apogee mbc (ppc) (bacnet), apogee mbc (ppc) (p2 ethernet), apogee mec (ppc) (bacnet) +7 more +9 moreA vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC)...8.8 High
- sap se netweaver and sap web dispatcher (internet communication manager)Memory Corruption vulnerability in SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager)7.5 High
- sap se cloud connectorImproper Authorization check in SAP Cloud Connector3.5 Low
- openwrt odhcpd, openwrt +1 moreodhcpd: pre-auth remote DoS via size_t underflow in dhcpv6_ia_handle_IAs (stack BOF, canary-terminated)6.5 Medium
- freerdpFreeRDP before 3.32.0 Shadow Server Divide-by-Zero via Frame Acknowledge PDU7.1 High
libextutils-typemaps-default-perlDebian,perl-ExtUtils-Typemaps-DefaultMageia +1 moreExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list7.5 Highlibextutils-typemaps-default-perlDebianExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty list7.5 High- apache software foundation datasketchesApache DataSketches: datasketches-cpp: Out-of-bounds read in VarOpt union deserialization allows denial of service via a truncated sketch7.5 High
- riot-os riotRIOT: nanoCoAP Block2 client slice handling underflows on inconsistent server-controlled block size7.1 High
- No product listedOpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side EtherNet/IP...7.5 High
- mongodb libmongocryptApplication denial of service via malformed KMS endpoint in MongoDB libmongocrypt7.1 High
- mongodb c driverOut-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver5.9 Medium
- aorimn dislockerDislocker through 0.7.3 Out-of-Bounds Heap Read via VMK/FVEK Datum Size Underflow6.9 Medium
- glavsoft tightvncInteger underflow in TightVNC Server cursor shape trimming leads to out-of-bounds read6.1 Medium
- openvpnAn integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows...7.1 High
- zephyrproject zephyrInteger underflow in IEEE 802.15.4 frame decryption leads to out-of-bounds read and write8.1 High
- wolfsshwstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms5.3 Medium
- arista networks wi-fi access pointsSecurity Advisory 01947.1 High
- mikrotik routerosMikroTik RouterOS Integer Underflow9.3 Critical
- apache software foundation thriftApache Thrift: A truncated HTTP request stops the D library's server, allowing an unauthenticated remote attacker to deny service8.7 High
- apache software foundation thriftApache Thrift: Integer underflow in C++ THeaderTransport allows an unauthenticated remote peer to terminate a 32-bit process8.2 High
- nvidia geforce, rtx, quadro, nvs, tesla +2 moreNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an...7.8 High
- nvidia geforce, rtx, quadro, nvs, tesla +1 more +3 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer...7.8 High
- watchguard fireware, fireware os +1 moreFireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service8.2 High
- watchguard fireware, fireware os +1 moreFireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service8.2 High
- eclipse foundation threadx netx duoICMPv6 option validation accepts a trailing byte residue, sending the Router Advertisement, Neighbor Solicitation, Neighbor Advertisement and Redirect option walkers past the packet or into a permanen…7.1 High
- zephyrproject zephyrInteger underflow of net_buf length in the MCUmgr serial (SMP over console) transport leads to out-of-bounds read6.8 Medium
- ibm powervm hypervisor, power system e1050 \(9043-mrx\) firmware, power system e1080 \(9080-hex\) firmware +24 more +26 moreThis Power System update is being released to address5.1 Medium
- No product listedBento4 1.6.0.0 contains an integer underflow vulnerability in the avcC and hvcC configuration...6.2 Medium
- No product listedBento4 1.6.0.0 contains an integer underflow vulnerability in AP4_AvccAtom::Create() and...7.5 High
- justicerage manalyzeJusticeRage Manalyze PE Parser pe.cpp _parse_relocations integer underflow4.8 Medium
- radare radare2radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser3.3 Low
- justicerage manalyzeJusticeRage Manalyze PE Parser pe.cpp _parse_debug integer underflow5.3 Medium
- mongodb c driverInteger Underflow → Heap Out-of-Bounds Read in `bson_new_from_buffer()6.9 Medium
- hp linux imaging and printing, hp inc. linux imaging and printing software (hplip) +1 moreHP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities5.1 Medium
- mikrotik routerosMikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndX8.2 High
- freerdpFreeRDP before 3.31.0 Out-of-bounds Write via SHOW_PROTOCOL7.7 High
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: denial of service in nss responder via crafted zero-length requests4.0 Medium
- qtOut-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module6.9 Medium
- adobe acrobat, acrobat reader, acrobat 2024 +2 more +4 moreAcrobat Reader | Integer Underflow (Wrap or Wraparound) (CWE-191)5.5 Medium
- microsoft skype for business server 2015 cu13, skype for business server 2019 cu8, skype for business server subscription edition cu1 +2 more +4 moreSkype for Business and Lync Denial of Service Vulnerability7.5 High
- Show moreLoading…