CWE-682: Incorrect Calculation
The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.
From the CWE List. © The MITRE Corporation.
Newest
- project-monai monai MONAI: MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass) 9.3 Critical
- netty netty-tcnative, netty-tcnative-boringssl-static +1 more netty-tcnative before 2.0.84.Final Denial of Service via BIO Write Overcount 8.2 High
- synacor zimbra collaboration suite, zimbra collaboration suite +1 more Zimbra Collaboration Suite Shared-File Mailbox Quota Accounting Error Enables Quota Exhaustion 6.5 Medium
- cisco cyber vision, open source snort3, secure firewall threat defense (ftd) software +1 more +3 more Multiple Cisco Products Snort 3 Software Hardening Release: October 2026 7.5 High
- vyperlang vyper Vyper 0.3.8 through 0.5.0b1 Optimizer Miscompilation of msg.value | K in Ternary Branches 8.2 High
- google chrome Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote... 9.6 Critical
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is used 8.7 High
- macrozheng mall macrozheng mall mall-admin/mall-portal moneyInfo OmsOrderServiceImpl.updateMoneyInfo calculation 4.8 Medium
- nearform fast-jwt fast-jwt clockTolerance: Infinity silently bypasses both exp and nbf validation (and persists in the verifier cache) 5.9 Medium
- mongodb c driver Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driver 5.1 Medium
- cisco campus gateway software, meraki mr wireless access points software, meraki mv firmware +1 more +3 more Cisco Meraki Hardening Release - Incorrect Calculation Vulnerabilities 8.8 High
- google chrome Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a... 5.4 Medium
- vyperlang vyper Vyper before 0.2.6 Call Stack Corruption via Complex Type Function Arguments 8.2 High
- villatheme curcy WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerability 5.3 Medium
-
zbarDebian ZBar commit 2ea2ca58 contains an undefined-behavior vulnerability in the Code 128 decode6()... 5.5 Medium - rti connext professional Incorrect Calculation vulnerability in RTI Connext Professional (Core Libraries) allows Abuse Existing Functionality. 8.7 High
- cisco secure firewall adaptive security appliance (asa) software, secure firewall management center (fmc), secure firewall threat defense (ftd) software +2 more Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Calculation Vulnerabilities 8.1 High
- grokability snipe-it snipe-it before 8.7.0 Checkout Request Counter Integrity Failure 5.3 Medium
- vbpf prevail PREVAIL: ALU32 pointer arithmetic accepted without is64 gate — verifier emits false PASS for pointer-corrupting programs 8.8 High
- vbpf prevail PREVAIL: Non-singleton typeset in add() skips offset update, allowing OOB access to pass eBPF verification 9.3 Critical
- vbpf prevail PREVAIL: Context-write no-op in do_mem_store allows unsafe eBPF programs to pass verification 9.3 Critical
- cisco ios xr software Cisco IOS XR Software Security Hardening Release: September 2026 8.8 High
- klever-io klever-go Klever-Go: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped) 9.6 Critical
- google chrome Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to... 8.8 High
- quantumnous new-api New API: Integer overflow in quota billing yields negative charges (self-crediting) 9.1 Critical
- linux dm-integrity: don't increment hash_offset twice 7.1 High
- intel trust domain extensions guest Incorrect calculation for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3:... 4.6 Medium
- cisco ios xe software, ios xe +1 more Cisco IOS XE Software Security Hardening Release 8.6 High
- zephyrproject zephyr Out-of-bounds read in DHCPv4 client message-type name lookup (net_dhcpv4_msg_type_name) 5.4 Medium
- linux, linux kernel +1 more smb/client: fix chown/chgrp with SMB3 POSIX Extensions 7.8 High
-
aws-cdk-libnpm,Amazon.CDK.AWS.CodeBuildNuGet,Amazon.CDK.LibNuGet +6 more +8 more AWS CDK CodeBuild S3 Log Encryption Boolean Inversion 3.3 Low - mozilla firefox, thunderbird +1 more JIT miscompilation in the JavaScript: WebAssembly component 9.8 Critical
- linux, linux kernel +1 more wifi: iwlwifi: mvm: fix driver-set TX rates on old devices 8.1 High
- linux, linux kernel +1 more netfilter: nf_tables: fix dst corruption in same register operation 5.5 Medium
- imagemagick ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments 5.5 Medium
- wolfssl X25519 x86_64 assembly final reduction leaves non-canonical field element 2.3 Low
- linux, linux kernel +1 more net: mvpp2: sync RX data at the hardware packet offset 8.6 High
- linux, linux kernel +1 more io_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retries 7.8 High
- linux, linux kernel +1 more netfilter: xt_policy: fix strict mode inbound policy matching 8.3 High
- linux, linux kernel, red hat enterprise linux 10 +7 more +9 more netfilter: nft_inner: Fix IPv6 inner_thoff desync 9.1 Critical
- struktur libheif libheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation 7.5 High
- linux, linux kernel +1 more rxrpc: Fix re-decryption of RESPONSE packets 9.8 Critical
- linux, linux kernel +1 more bpf: Preserve id of register in sync_linked_regs() 7.8 High
- netatalk Bitwise OR of errno values 3.7 Low
- netatalk hextoint macro uppercase bug 3.1 Low
- ledger bitcoin app Ledger Bitcoin App 2.1.0 Address Derivation Error via Miniscript 4.1 Medium
- linux, linux kernel +1 more bpf: Properly mark live registers for indirect jumps 7.8 High
- zcashfoundation zebra, zfnd zebrad +1 more ZEBRA: Block Validator Undercounts Coinbase and P2SH Sigops 9.2 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption 7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more bpf: Fix regsafe() for pointers to packet 7.8 High
- Show olderLoading…