CWE-195: Signed to Unsigned Conversion Error
The product uses a signed primitive and performs a cast to an unsigned primitive, which can produce an unexpected value if the value of the signed primitive can not be represented using an unsigned primitive.
A kind of CWE-681 Incorrect Conversion between Numeric Types.
From the CWE List. © The MITRE Corporation.
Newest
- onnx ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute 6.2 Medium
- keil mdk-middleware Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer 6.5 Medium
- keil mdk-middleware Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP... 5.3 Medium
- rt-labs ab soem Out-of-Bounds Read via Unchecked Length Values 6.5 Medium
- rt-labs ab soem Memory Corruption via Integer Underflow in Message Length Validation 8.3 High
- juniper networks junos os Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is used 7.1 High
- godotengine godot engine Godot Engine through 4.7.2 has a heap out-of-bounds write exists in the binary resource loader ... 2.5 Low
- bouncycastle bc-java MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender 8.7 High
- denx software engineering u-boot U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK 8.8 High
- denx software engineering u-boot U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply 8.8 High
- mobilitydb MobilityDB through 1.3.0 Out-of-bounds Read DoS via WKB Deserialization 7.1 High
- cisco secure firewall adaptive security appliance (asa) software, secure firewall threat defense (ftd) software +1 more Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability 6.8 Medium
- rabbitmq amqp091-go RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration 8.2 High
- themoos core-moos MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Negative Serialized String Length 8.7 High
- ni labview Integer Conversion Vulnerability Resulting in an Out of Bounds Read in NI LabVIEW 6.9 Medium
- coturn Coturn: Pre-authentication heap memory disclosure in ACME redirect (`try_acme_redirect`) 8.2 High
- erlang erts, otp, erlang\/otp +2 more Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder 5.1 Medium
- nlnet labs unbound Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2 5.9 Medium
- freeswitch FreeSWITCH: Pre-authentication heap buffer overflow in libesl `Content-Length` parsing 9.1 Critical
- pupnp pupnp: Port truncation via atoi() cast in parse_uri() allows SSRF port confusion 6.9 Medium
- academysoftwarefoundation openexr OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpp 6.5 Medium
- libcoap Integer signedness error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5... 7.5 High
- sequoia-pgp sequoia Sequoia PGP has Subtraction Overflow when aes_key_unwrap function is provided ciphertext that is too short 5.3 Medium
- ggml llama.cpp llama.cpp tokenizer signed vs. unsigned heap overflow 8.6 High
- ggml llama.cpp llama.cpp Vulnerable to Buffer Overflow via Malicious GGUF Model 8.8 High
- juniper junos, junos os evolved, juniper networks junos os +2 more Junos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crash 7.1 High
- snowflakedb pdo snowflake Snowflake PHP PDO Driver has a Signed-to-Unsigned Conversion Error 4.4 Medium
- rt-thread drivers/wlan/wlan_mgmt,c in RT-Thread through 5.0.2 has an integer signedness error and resultant... 8.4 High
- dell alienware m15 r6 firmware, alienware m15 r7 firmware, chengming 3900 firmware +289 more +291 more Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated... 6.7 Medium
- qualcomm apq5053-aa firmware, csra6620 firmware, csra6640 firmware +62 more +64 more Signed-to-unsigned conversion error in Audio 7.8 High
- zephyrproject zephyr Potential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driver 7.0 High
- squareup okio Okio GzipSource unhandled exception Denial of Service 5.9 Medium
- wellintech kinghistorian An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of... 8.1 High
- facebook hermes Signed to Unsigned Conversion Error in Facebook Hermes 8.1 High
- gnu glibc, debian linux, fedoraproject fedora +3 more +5 more An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU... 8.1 High
- illumos, illumos osnet-incorporation +1 more illumos osnet-incorporation bcopy() and bzero() implementations make signed instead of unsigned... 8.6 High
- google chrome, libpng, debian linux +10 more +12 more Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01,... 6.8 Medium