CWE-682: Incorrect Calculation
The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.
From the CWE List. © The MITRE Corporation.
Newest
- miniupnp project ngiflibngiflib 0.4 has a heap-based buffer overflow in WritePixel() in ngiflib.c when called from...8.8 High
- miniupnp project ngiflibngiflib 0.4 has a heap-based buffer overflow in WritePixels() in ngiflib.c when called from...8.8 High
- google chromeInappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a...8.8 High
- cisco ios xr software, ios xr, carrier routing system +2 moreCisco IOS XR Software Intermediate System–to–Intermediate System Denial of Service Vulnerability7.4 High
- freebsdIn FreeBSD 12.0-STABLE before r350222, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before...7.8 High
- graphicsmagick, canonical ubuntu linux, debian linux +3 more +5 morecoders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (floating...6.5 Medium
- apache openoffice, canonical ubuntu linux +1 moreWhen loading a document with Apache Open Office 4.1.5 and earlier with smaller end line...7.8 High
- orion project orionFlaw in streaming state in orion7.5 High
- wireshark, debian linux, opensuse leap +2 moreIn Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan...7.5 High
- cisco remote phy, remote +1 moreCisco Remote PHY IPv4 Fragment Denial of Service Vulnerability7.5 High
- rockcarry ffjpegffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service (FPE...6.5 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using...7.8 High
- eblock eos4jespritblock eos4j, an unofficial SDK for EOS, through 2018-07-12 mishandles floating-point...7.5 High
- microsoft research javascript cryptography librarySensitive Data Exposure in msrcrypto9.8 Critical
- google androidIn writeToParcel and readFromParcel of PeriodicAdvertisingReport.java, there is a permission...7.8 High
- google androidA remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android...8.8 High
- google androidA vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1...7.5 High
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA...7.8 High
- xen, citrix xenserver, debian linux +2 moreXen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive...8.8 High
- xen, citrix xenserver +1 moreThe xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS...8.8 High
- imagemagickWhen ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point...6.5 Medium
- google androidA remote code execution vulnerability in the Android media framework. Product: Android. Versions:...7.8 High
- google androidA elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 4.4...7.8 High
- golang go, fedoraproject fedora, novell suse package hub for suse linux enterprise +1 more +3 moreA bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in...5.9 Medium
- nvidia gpu display driver, gpu driver +1 moreAll versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...7.8 High
- xenXen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest...8.8 High
- entropymine imageworsenerlibimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type...8.8 High
- mozilla firefox, firefox esr, network security services +2 more +4 moreA flaw in DRBG number generation within the Network Security Services (NSS) library where the...5.3 Medium
- google androidAn elevation of privilege vulnerability in Audioserver could enable a local malicious application...7.8 High
- debian linux, linux kernel, redhat enterprise linux +5 more +7 moreA flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr...5.5 Medium
- ntpNTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote...5.3 Medium
- xenXen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that...5.5 Medium
- google chrome, mozilla firefox, seamonkey +2 more +4 moreOff-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote...6.8 Medium
- linux kernelnet/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are...5.9 Medium