CWE-682: Incorrect Calculation
The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.
From the CWE List. © The MITRE Corporation.
Newest
- parity frontierIncorrect Calculation in Frontier leads to inflated Ethereum chain gas prices5.3 Medium
- openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 moreGovernorVotesQuorumFraction updates to quorum may affect past defeated proposals in @openzeppelin/contracts7.5 High
- western digital sweet b library, westerndigital sweet b +1 moreAlgorithm incorrectly returning error and Invalid unreduced value written to output buffer5.3 Medium
- western digital sweet b library, westerndigital sweet b +1 moreShared secret or Point multiplication of NIST P-256 points with X coordinate of zero5.3 Medium
- western digital sweet b library, westerndigital sweet b +1 moreSweet-B Library: Point compress/decompress using the wrong bit for sign5.3 Medium
- bytecodealliance cranelift-codegen, wasmtime +1 moreMiscompilation of `i8x16.swizzle` and `select` with v128 inputs in Wasmtime4.8 Medium
- fast string search project string searchDenial of Service (DoS)7.5 High
- lighttpdLighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU...7.5 High
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreIncorrect Calculation in moodle9.8 Critical
- saitoha libsixelThere is a floating point exception error in sixel_encoder_do_resize, encoder.c:633 in libsixel...6.5 Medium
- solana rbpfSolana rBPF - Incorrect Calculation in sdiv instruction9.1 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x...5.9 Medium
- fisglobal gt.mAn issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using...7.5 High
- yottadb, fisglobal gt.m +1 moreAn issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can...7.5 High
- yottadb, fisglobal gt.m +1 moreAn issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can...7.5 High
- stb project stb, fedoraproject fedora +1 moreSTB v2.27 was discovered to contain an integer shift of invalid size in the component...8.8 High
- bytecodealliance cranelift-codegen, wasmtime +1 moreCranelift vulnerable to miscompilation of constant values in division on AArch645.9 Medium
- bytecodealliance wasmtimeInvalid drop of partially-initialized instances in wasmtime5.1 Medium
- open-policy-agent opa, openpolicyagent open policy agent +1 moreArray literal misordering in github.com/open-policy-agent/opa6.3 Medium
- f5 big-ip afm, big-ip advanced firewall manager +1 moreOn BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all...5.3 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn certain hardware BIG-IP platforms, in version 15.1.x before 15.1.4 and 14.1.x before 14.1.3,...7.5 High
- libexpat project libexpat, debian linux, netapp active iq unified manager +8 more +10 moreIn Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts...8.8 High
- toktok toxcore, fedoraproject fedora +1 moreA stack-based buffer overflow in handle_request function in DHT.c in toxcore 0.1.9 through 0.1.11...9.8 Critical
- google tensorflowSegfault due to negative splits in `SplitV`5.5 Medium
- vyperlang vyperBounds check missing for decimal args in Vyper4.3 Medium
- datalust seqDatalust Seq before 2021.2.6259 allows users (with view filters applied to their accounts) to see...6.5 Medium
- enbra ewm, at-wmbus-16-2, er-am dn 15 +1 more +3 moreIncorrect calculation in Enbra EWM does not report backflows or no flow events6.2 Medium
@liquity/contractsnpmIncorrect TCR calculation in batchLiquidateTroves() during Recovery Mode3.1 Low- arcworks ark-r1cs-stdCalculation error in ark-r1cs-std9.8 Critical
- linux kernel, netapp cloud backup, h300e firmware +7 more +9 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...8.8 High
- siemens scalance xm-400 firmware, scalance xm408-4c firmware, scalance xm408-4c l3 firmware +8 more +10 moreA vulnerability has been identified in SCALANCE XM-400 Family (All versions < V6.4), SCALANCE XR...7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreThe WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read...6.5 Medium
- golang go, debian linux, fedoraproject fedora +2 more +4 moreIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...6.5 Medium
- coturn, fedoraproject fedora +1 moreLoopback bypass in Coturn7.2 High
- stableyieldcredit project stableyieldcreditThe _deposit function in the smart contract implementation for Stable Yield Credit (yCREDIT), an...7.5 High
- ethereum go ethereum, go-ethereum +1 moreConsensus flaw during block processing5.3 Medium
- ethereum go ethereum, go-ethereum +1 moreErroneous Proof of Work calculation in geth5.3 Medium
- ethereum go ethereum, go-ethereum +1 moreShallow copy bug in geth6.5 Medium
- qemuati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a...6.5 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreIn Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in epan...7.5 High
bigint-moneynpmIncorrect Calculation in bigint-moneyNo score- python, fedoraproject fedora, opensuse leap +4 more +6 moreIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 Medium
- google androidAirbrush FW's scratch memory allocator is susceptible to numeric overflow. When the overflow...9.8 Critical
- microsoft research javascript cryptography library v1.4, research javascript cryptography library +1 moreIncorrect Calculation in the MSR JavaScript Cryptography Library9.8 Critical
- google android, huawei honor 8a firmware, honor 8x firmware +19 more +21 moreIn reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to...8.8 High
- upx, fedoraproject fedora +1 moreA floating-point exception was discovered in PackLinuxElf::elf_hash in p_lx_elf.cpp in UPX 3.95....5.5 Medium
- xen, fedoraproject fedora +1 moreAn issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to cause a denial of...8.8 High
- google androidIn handleRun of TextLine.java, there is a possible application crash due to improper input...7.5 High
- pythonlibrary/glob.html in the Python 2 and 3 documentation before 2016 has potentially misleading...7.5 High
- liblnk project liblnkIn libyal liblnk before 20191006, liblnk_location_information_read_data in...3.3 Low
- Show moreLoading…