CWE-680: Integer Overflow to Buffer Overflow
The product performs a calculation to determine how much memory to allocate, but an integer overflow can occur that causes less memory to be allocated than expected, leading to a buffer overflow.
A kind of CWE-190 Integer Overflow or Wraparound.
From the CWE List. © The MITRE Corporation.
Newest
- redis, fedoraproject fedora +1 moreRedis vulnerability in STRALGO LCS on 32-bit systems7.5 High
- genivia gsoap, oracle communications diameter signaling router, communications eagle application processor +3 more +5 moreA code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP...9.8 Critical
- genivia gsoap, fedoraproject fedora +1 moreA code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP...9.8 Critical
- gonitro nitro pro, nitro pro +1 moreAn arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software...8.8 High
- netgear r6700, r6700 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreInteger Overflow in FreeRDP3.5 Low
- freerdp, debian linux, opensuse leap +2 moreInteger Overflow to Buffer Overflow in FreeRDP6.9 Medium
- facebook instagram, instagram for android +1 moreA large heap overflow could occur in Instagram for Android when attempting to upload an image...7.8 High
- avira free antivirus, antivirus free antivirus +1 moreAvira Free Antivirus is proned to a local privilege escalation through the execution of kernel code from a restricted user.8.1 High
- xcftools project xcftools, debian linux +1 moreAn exploitable integer overflow vulnerability exists in the flattenIncrementally function in the...8.8 High
- xcftools project xcftools, debian linux +1 moreAn exploitable integer overflow vulnerability exists in the flattenIncrementally function in the...7.5 High
- check point software technologies ltd. rdesktop, debian linux, opensuse leap +2 morerdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap...9.8 Critical
- check point software technologies ltd. rdesktop, debian linux, opensuse leap +2 morerdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to an Out-Of...9.8 Critical
- check point software technologies ltd. freerdp, canonical ubuntu linux, debian linux +6 more +8 moreFreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer...9.8 Critical
- check point software technologies ltd. freerdp, canonical ubuntu linux, debian linux +7 more +9 moreFreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based...9.8 Critical