CWE-681: Incorrect Conversion between Numeric Types
When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.
A kind of CWE-704 Incorrect Type Conversion or Cast.
From the CWE List. © The MITRE Corporation.
Newest
- google tensorflowOverflow/crash in `tf.range`5.5 Medium
- openpowerfoundation skibootAn issue was discovered in OpenPOWER 2.6 firmware. unpack_timestamp() calls le32_to_cpu() for...9.8 Critical
- gpac, debian linux +1 moreAn exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality...8.8 High
- gpac, debian linux +1 moreAn exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality...8.8 High
- google tensorflowCrash in NMS ops caused by integer conversion to unsigned in TensorFlow5.5 Medium
- google tensorflowHeap OOB in nested `tf.map_fn` with `RaggedTensor`s in TensorFlow7.1 High
- google tensorflowBad alloc in `StringNGrams` caused by integer conversion in TensorFlow5.5 Medium
- google tensorflowCrash caused by integer conversion to unsigned in TensorFlow5.5 Medium
- google tensorflowInteger overflow due to conversion to unsigned in TensorFlow5.5 Medium
- trend micro password manager, trend micro, inc. micro password manager +1 moreTrend Micro Password Manager (Consumer) version 5.0.0.1217 and below is vulnerable to an Integer...7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +24 more +26 moreWindows MSHTML Platform Remote Code Execution Vulnerability7.5 High
- bytecodealliance wasmtime, cranelift-codegen +1 moreMemory access due to code generation flaw in Cranelift module7.2 High
- google tensorflowSegfault in tf.raw_ops.ImmutableConst2.5 Low
- anymap project anymapIncorrect cast in anymap9.8 Critical
- mozilla firefoxDue to unexpected data type conversions, a use-after-free could have occurred when interacting...8.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreLinux kernel bpf verifier incorrect mod32 truncation7.8 High
- gnome glib, broadcom brocade fabric operating system firmware, debian linux +7 more +9 moreAn issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function...7.5 High
- gnome glib, broadcom brocade fabric operating system firmware, debian linux +7 more +9 moreAn issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If...7.5 High
- softmaker officeAn exploitable signed conversion vulnerability exists in the TextMaker document parsing...8.8 High
- softmaker officeAn exploitable sign extension vulnerability exists in the TextMaker document parsing...8.8 High
- contiki-os contikiAn issue was discovered in Contiki through 3.0. A memory corruption vulnerability exists in the...7.5 High
- nanorand project nanorandImproper random number generation in nanorand9.8 Critical
- linux kernelAn information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux...4.0 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +38 more +40 moreWindows Kernel Local Elevation of Privilege Vulnerability7.8 High
- linux kernelAn issue was discovered in the Linux kernel before 5.8.15. scalar32_min_max_or in kernel/bpf...5.5 Medium
- carltongibson django-filter, fedoraproject fedora +1 moreDenial of Service vulnerability in django-filter7.5 High
- facebook hermesSigned to Unsigned Conversion Error in Facebook Hermes8.1 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 High
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreInteger casting vulnerability in `update_recv_secondary_order` in FreeRDP3.1 Low
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm apq8096au firmware, msm8996au firmware +10 more +12 moreWhile handling the vendor command there is an integer truncation issue that could yield a buffer...7.8 High
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....8.2 High
- gnu glibc, debian linux, fedoraproject fedora +3 more +5 moreAn exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU...8.1 High
- openwrtuhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error....7.5 High
- fedoraproject fedora, nagios remote plug in executor +1 moreNagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small...7.5 High
- debian linux, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), tianocore edk2 +2 moreInteger truncation in EDK II may allow an authenticated user to potentially enable escalation of...7.8 High
- mz-automation libiec61850In libIEC61850 1.4.0, StringUtils_createStringFromBuffer in common/string_utilities.c has an...6.5 Medium
- google tensorflowHeap buffer overflow in `UnsortedSegmentSum` in TensorFlow2.6 Low
- sqlite, netapp cloud backup, ontap select deploy administration utility +5 more +7 morelookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a...9.8 Critical
- [unknown] libnbdStructured reply is a feature of the newstyle NBD protocol allowing the server to send a reply in...7.3 High
- gnu serveezGNU Serveez through 0.2.2 has an Information Leak. An attacker may send an HTTP POST request to...7.5 High
- debian pdns, powerdns authoritative server +1 morePowerDNS Authoritative daemon , all versions pdns 4.1.x before pdns 4.1.10, exiting when...4.3 Medium
- gnu binutils, binutils gold, gnu binutils gold +2 more +4 moreGNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input...5.5 Medium
- treasuredata fluent bitAn issue was discovered in the MQTT input plugin in Fluent Bit through 1.0.4. When this plugin...7.5 High
- freedesktop poppler, canonical ubuntu linux, debian linux +8 more +10 moreIn Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef:...7.8 High
- check point software technologies ltd. freerdp, canonical ubuntu linux, debian linux +7 more +9 moreFreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based...9.8 Critical
- atlantiswordprocessor atlantis word processorAn exploitable stack-based buffer overflow vulnerability exists in the JPEG parser of Atlantis...8.8 High
- godotengine godotGodot Engine version All versions prior to 2.1.5, all 3.0 versions prior to 3.0.6. contains a...7.5 High
- libgit2, debian linux +1 moreA flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign...8.1 High
- php, canonical ubuntu linux, debian linux +2 moregd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7...5.5 Medium
- libming, debian linux +1 moreIn libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative...6.5 Medium
- Show moreLoading…