CWE-681: Incorrect Conversion between Numeric Types
When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.
A kind of CWE-704 Incorrect Type Conversion or Cast.
From the CWE List. © The MITRE Corporation.
Newest
- signalwire freeswitch FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling 9.1 Critical
- samsung exynos 1480, exynos 2400, samsung semiconductor exynos 1580 +3 more +5 more In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can... No score
- tesseract-ocr tesseract Tesseract: GENERIC_2D_ARRAY DeSerializeSize signed integer comparison bypass allows negative dimensions 5.5 Medium
- randombit botan Botan: Integer overflow when reporting block size in FFI can cause memory corruption 9.2 Critical
- mongodb c# driver BSON output corruption via out-of-range binary subtype bypassing UUID and OldBinary guards 6.9 Medium
- vyperlang vyper Vyper 0.3.4 through 0.5.0b1 create_from_blueprint Offset Validation Bypass via Unsigned Wraparound 6.3 Medium
- ibm mq advanced container images, mq operator, supplied mq advanced container images +2 more IBM MQ Denial of Service 5.3 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows TCP/IP Local Elevation of Privilege Vulnerability 7.8 High
- mongodb php driver Heap buffer overflow via 32-bit string-length truncation in MongoDB PHP Driver 2.0 Low
- excelize Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader 6.5 Medium
- nvidia virtual gpu manager NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where... 6.7 Medium
- nvidia geforce, rtx, quadro, nvs, tesla +1 more +3 more NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer... 7.8 High
- linux, linux kernel +1 more accel: ethosu: Don't read the U65 rounding mode as a storage mode 7.8 High
- linux, linux kernel +1 more af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header(). 5.5 Medium
- linux, linux kernel +1 more bpf: zero extend the result of an arena 32-bit cmpxchg 5.5 Medium
-
librawDebian,darktableUbuntu,dcrawUbuntu +5 more +7 more LibRaw 0.22.0 contains an incorrect numeric conversion vulnerability in LibRaw::parse_tiff_ifd()... 5.5 Medium -
nanosvgUbuntu NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in the rasterizer... 7.5 High -
nanosvgUbuntu NanoSVG 239e102ec contains an incorrect numeric conversion vulnerability in nsvg__curveDivs()... 6.5 Medium -
nanosvgUbuntu NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in... 7.5 High -
mujsDebian MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c... 7.5 High - rabbitmq amqp091-go RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client 8.9 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 more Microsoft JScript Remote Code Execution Vulnerability 8.1 High
- mongodb c driver Silent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parser 6.3 Medium
- mongodb c++ driver, c\+\+ driver +1 more BSON element injection via NUL-embedded document keys in builder append 5.9 Medium
- mongodb c++ driver, c\+\+ driver +1 more Heap over-read or silent misparse via 32-bit truncation of JSON length in BSON JSON parser 5.9 Medium
- google libjxl libjxl < 0.12.0 Container Box Parser Integer Underflow via 32-bit Size Truncation 5.3 Medium
- ncopa su-exec su-exec through 0.3 Privilege Escalation via Numeric User ID 8.5 High
-
io.netty.incubator:netty-incubator-codec-bhttpMaven netty-incubator-codec-ohttp: Binary HTTP parser unchecked varint length overflow causes decoder crash 5.3 Medium - ffmpeg FFmpeg Integer Narrowing Conversion OOB Memory Access in AV1 RTP Packetizer 5.8 Medium
- red hat build of apache camel for spring boot 4, enterprise linux 10, enterprise linux 8 +5 more +7 more Io.undertow/undertow: undertow: http response header integrity issue due to character truncation 5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 more Qemu-kvm: vhost inflight migration vmstate integer type mismatch causes out-of-bounds access 4.4 Medium
- samsung android, samsung mobile devices +1 more Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026... 5.1 Medium
- allinurl goaccess GoAccess WebSocket Server: Signed 32 bit truncation of the 64 bit frame length causes a remote pre-authentication denial of service 8.7 High
- linux, linux kernel +1 more bpf: sockmap: fix tail fragment offset in bpf_msg_push_data 8.4 High
- microsoft powerpoint, 365 apps, 365 apps for enterprise +10 more +12 more Microsoft PowerPoint Remote Code Execution Vulnerability 7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 more NTFS Elevation of Privilege Vulnerability 7.8 High
- imagemagick ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow 6.5 Medium
- freebsd Multiple vulnerabilities in the sound(4) mmap path 7.8 High
- linux, linux kernel +1 more RDMA/umem: Fix truncation for block sizes >= 4G 7.8 High
- linux, linux kernel +1 more iommu/amd: Fix clone_alias() to use the original device's devid 8.8 High
- ni grpc-device, instrumentstudio, grpc device server +2 more Incorrect Conversion between Numeric Types in NI grpc-device due to missing range checks in CodeGen 6.3 Medium
- vllm vLLM GGUF Kernels: int64_t to int truncation of tensor dimensions causes GPU buffer overflow 5.3 Medium
- nvidia geforce, gpu display driver, rtx, quadro, nvs +2 more +4 more NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an... 7.8 High
- hamba avro, red hat cryostat 4 on rhel 9, multicluster global hub 1.4.5 +11 more +13 more iskorotkov/avro: Integer Overflow in Avro Decoder 8.7 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 more Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability 8.8 High
- bytecodealliance wasmtime Wasmtime leaks host data with 64-bit tables and Winch 2.3 Low
- nvidia triton inference server NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server... 7.5 High
- marginal smart contract, v1-core +1 more CVE-2026-4931 8.6 High
- leancrypto leancrypto: Integer truncation in X.509 name parser enables certificate identity impersonation 5.9 Medium
- color iccdev iccDEV: UB at IccIO.cpp 6.2 Medium
- Show olderLoading…