CWE-681: Incorrect Conversion between Numeric Types
When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.
A kind of CWE-704 Incorrect Type Conversion or Cast.
From the CWE List. © The MITRE Corporation.
Newest
- color iccdeviccDEV: UB at IccUtilXml.cpp6.2 Medium
- kjur jsrsasign, red hat migration toolkit for virtualization 2.1, migration toolkit for virtualization 2.9 +5 more +7 morejsrsasign: Negative Exponent Handling Leads to Signature Verification Bypass8.7 High
soroban-env-hostcrates.ioSoroban: Muxed address<->ScVal conversions may break after a conversion failure1.7 Low- color iccdeviccDEV has SIO in parse3DTable() at iccFromCube.cpp Line 2186.2 Medium
- imagemagickImageMagick has integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder7.5 High
- color iccdeviccDEV has UB runtime error in <icTagTypeSignature>7.8 High
- oneflowA floating-point exception (FPE) in the flow.column_stack component of OneFlow v0.9.0 allows...6.5 Medium
- color iccdeviccDEV has Type Confusion in CIccSegmentedCurveXml::ToXml() at IccXML/IccLibXML/IccMpeXml.cpp8.8 High
- color iccdeviccDEV has Type Confusion in SIccCalcOp::ArgsPushed() at IccProfLib/IccMpeCalc.cpp8.8 High
- color iccdeviccDEV has Integer Overflow/Underflow in CIccXmlArrayType::ParseTextCountNum()7.8 High
- eclipse paho mqtt, eclipse foundation paho.mqtt.golang (go mqtt v3.1 library) +1 moreEclipse Paho Go MQTT may incorrectly encode strings if length exceeds 65535 bytes6.3 Medium
- corednsCoreDNS: DNS Cache Pinning via etcd Lease ID Confusion7.1 High
- microsoft office, word, 365 apps +12 more +14 moreMicrosoft Word Remote Code Execution Vulnerability8.4 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 24h2, windows server 2025, windows server 2025 (server core installation) +1 more +3 moreWindows Resilient File System (ReFS) Elevation of Privilege Vulnerability8.8 High
- subratamal wallet for woocommerce, standalonetech terawallet +1 moreWallet for WooCommerce <= 1.5.6 - Authenticated (Subscriber+) Incorrect Conversion between Numeric Types6.5 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +13 more +15 moreDHCP Server Service Remote Code Execution Vulnerability7.2 High
- vyperlang vypervyper's range(start, start + N) reverts for negative numbers5.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft ODBC Driver Remote Code Execution Vulnerability8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIncorrect code generation could have led to unexpected numeric conversions and potential...7.5 High
- dell alienware m15 r6 firmware, alienware m15 r7 firmware, chengming 3900 firmware +289 more +291 moreDell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated...6.7 Medium
- squid-cache squid, red hat enterprise linux 6, enterprise linux 7 +7 more +9 moreSquid: denial of service in ftp8.6 High
- zephyrproject zephyrPotential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driver7.0 High
- squareup okioOkio GzipSource unhandled exception Denial of Service5.9 Medium
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreA vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive...8.6 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreNTFS Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- nvidia vgpu software (virtual gpu manager - citrix hypervisor, vmware vsphere, red hat enterprise linux kvm), nvidia cloud gaming (virtual gpu manager - red hat enterprise linux kvm), virtual gpu +1 moreNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where sign...6.7 Medium
- wellintech kinghistorianAn integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of...8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Media Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 20h2 +17 more +19 moreWindows Bluetooth Driver Elevation of Privilege Vulnerability8.8 High
- microsoft office, visio, 365 apps +6 more +8 moreMicrosoft Office Visio Remote Code Execution Vulnerability7.8 High
- debian linux, nvidia gpu display driver, cloud gaming +2 more +4 morenvidia-graphics-drivers-legacy-390xx - security update5.5 Medium
- debian linux, nvidia gpu display driver, cloud gaming +2 more +4 morenvidia-graphics-drivers-legacy-390xx - security update5.5 Medium
- debian linux, nvidia gpu display driver, cloud gaming +2 more +4 morenvidia-graphics-drivers-legacy-390xx - security update7.8 High
- siemens siplus tim 1531 irc, tim 1531 irc, siplus tim 1531 irc firmware +2 moreA vulnerability has been identified in SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions <...6.9 Medium
- xen, debian linux, fedoraproject fedora +2 moreOxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed...5.5 Medium
- facebook hermesAn integer conversion error in Hermes bytecode generation, prior to commit...9.8 Critical
- hyperledger besuIncorrect Conversion between Numeric Types in Besu Ethereum Client9.1 Critical
- linux kernel, redhat enterprise linux +1 moreAn integer coercion error was found in the openvswitch kernel module. Given a sufficiently large...7.8 High
- oracle jdk, openjdk, apache xalan-java +14 more +16 moreApache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets7.5 High
- ffmpegFFmpeg dxtroy.c integer coercion5.3 Medium
- ffmpegFFmpeg ansi.c decode_frame integer coercion5.3 Medium
- eipstackgroup opener ethernet/ip, opener project opener +1 moreEIPStackGroup OpENer Ethernet/IP Incorrect Conversion between Numeric Types8.2 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x...7.5 High
- openbsdslaacd in OpenBSD 6.9 and 7.0 before 2022-03-22 has an integer signedness error and resultant...7.5 High
- linux kernel, fedoraproject fedora, oracle communications cloud native core binding support function +2 more +4 moreA flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP...5.5 Medium
- fanuc r-30ia, r-30ia mate, r-30ia firmware, r-30ia mate firmware +9 more +11 moreThe FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which...7.5 High
- hyperledger besuSHL, SHR, and SAR operations trigger native exception at key values in besu7.5 High
- google androidIn C2SoftMP3::process() of C2SoftMp3Dec.cpp, there is a possible out of bounds write due to a...6.5 Medium
- Show moreLoading…