CWE-682: Incorrect Calculation
The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 morebpf: Fix incorrect pruning due to atomic fetch precision tracking7.8 High
- goxmldsig project goxmldsig, red hat multicluster global hub 1.3.4, multicluster global hub 1.4.5 +10 more +12 moregoxmldsig has validateSignature Loop Variable Capture Signature Bypass7.5 High
- graphprotocol contracts, thegraph graph protocol contracts +1 moreThe Graph: Revocable vesting contracts allows early access to locked tokens5.3 Medium
libcrux-sha3crates.iolibcrux-sha3: Incorrect output from SHAKE squeeze functions8.7 High- cloudflare circlIncorrect calculation in CIRCL secp384r1 CombinedMult2.9 Low
- color iccdeviccDEV memcpy-param-overlap in CIccTagMultiProcessElement::Apply()7.8 High
ml-dsacrates.ioml-dsa's UseHint function has off by two error when r0 equals zero5.5 Medium- script3 soroban-fixed-point-mathsoroban-fixed-point-math has Incorrect Rounding and Overflow Handling in Signed Fixed-Point Math with Negatives7.5 High
- juniper junos os evolvedJunos OS Evolved: Flapping management interface causes MAC learning on label-switched interfaces to stop7.1 High
- gitoxidelabs gix-date, gitoxide, red hat logging subsystem for red hat openshift +3 more +5 moreGix-date: gix-date: undefined behavior due to invalid string generation7.1 High
- vercel ai, ai sdk +1 moreVercel’s AI SDK's filetype whitelists can be bypassed when uploading files3.7 Low
- linuxfoundation pytorchpytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and...7.5 High
- matrix-org matrix-rust-sdkmatrix-sdk-base has panic in the `RoomMember::normalized_power_level()` method2.7 Low
- polkadot-evm frontierPolkadot Frontier contains missing `check_inherent` for `note_min_gas_price_target` inflates gas price6.9 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +13 more +15 moreLibssh: incorrect return code handling in ssh_kdf() in libssh5.0 Medium
- amd versal adaptive soc devices, alveo v80 compute accelerator, platform loader and manager (plm) +6 more +8 moreIn AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime (post...3.2 Low
- python software foundation cpythonTarfile extracts filtered members when errorlevel=07.5 High
- vyperlang vypersqrt doesn't define rounding behavior in Vyper2.3 Low
- No product listedThe mstatus register in RSD commit 3d13a updates incorrectly, leading to processing errors.5.3 Medium
- grpc, grpc grpc-c++ +1 moreDenial of Service through Data corruption in gRPC-C++6.9 Medium
- m-files corporation ainoIncorrect evaluation of effective permissions in M-Files Aino5.3 Medium
- matter-labs zksolc, era-compiler-solidity +1 more`fold (xor (shl 1, x), -1) -> (rotl ~1, x)` misoptimization in zksolc5.9 Medium
- intel ethernet 800 series controllers driver, ethernet complete driver pack +1 moreWrap-around error in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and...9.3 Critical
- linux, linux kernel +1 morebtrfs: zoned: fix calc_available_free_space() for zoned mode5.5 Medium
- linux, linux kernel +1 moredrm/amdkfd: don't allow mapping the MMIO HDP page with large pages7.8 High
- renesas rcar gen3, rcar gen3 firmware, rcar gen3 v2.5 +2 moreIncorrect Address Range Calculations7.5 High
- evmosEvmos is missing create validator check3.5 Low
- evmosEvmos is missing precompile checks3.5 Low
- evmosevmos allows transferring unvested tokens after delegations3.5 Low
- oneflowAn issue in the oneflow.permute component of OneFlow-Inc. Oneflow v0.9.1 causes an incorrect...9.8 Critical
- matter-labs era-compiler-solidityera-compiler-solidity contains a `xor(zext(cmp), -1)` misoptimization5.9 Medium
microcodeMageia,intel-microcodeDebian,intel-ucodeAlpaquita +2 more +4 moreIncorrect calculation in microcode keying mechanism for some Intel(R) Xeon(R) D Processors with...5.3 Medium- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +61 more +63 moreDue to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause...4.9 Medium
- vyperlang vyperVyper has incorrect storage layout for contracts containing large arrays7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreInternet Connection Sharing (ICS) Denial of Service Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreInternet Connection Sharing (ICS) Remote Code Execution Vulnerability8.8 High
- vyperlang vyper_abi_decode input not validated in complex expressions in Vyper5.3 Medium
- ethereum blockchainAn issue in Ethereum Blockchain v0.1.1+commit.6ff4cd6 cause the balance to be zeroed out when the...5.3 Medium
- rockwell automation armor powerflex, rockwellautomation armor powerflex firmware +1 moreRockwell Automation Armor PowerFlex Vulnerable to Denial-Of-Service8.6 High
- linux kernelIncorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation10.0 Critical
- virtualsquare picotcpVirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 lacks certain size calculations before...7.5 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font-...5.5 Medium
- parity frontierFrontier's modexp precompile is slow for even modulus7.5 High
- hashicorp nomad, nomad enterprise +1 moreNomad ACLs Can Not Deny Access to Workload's Own Variables2.7 Low
- go standard library crypto/internal/nistec, golang go +1 moreIncorrect calculation on P256 curves in crypto/internal/nistec5.3 Medium
- openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 moreOpenZeppelin Contracts contains Incorrect Calculation6.5 Medium
- filippo.io/nistec, nistec project nistec +1 moreIncorrect multiplication of unreduced P-256 scalars in filippo.io/nistec7.5 High
- intel xeon gold 5315y firmware, xeon gold 5317 firmware, xeon gold 5318h firmware +50 more +52 moreIncorrect calculation in microcode keying mechanism for some 3rd Generation Intel(R) Xeon(R)...6.1 Medium
- ivanti connect secure, neurons for zero-trust access, policy secure +2 moreAn unauthenticated attacker can cause a denial-of-service to the following products: Ivanti...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreBIG-IP software SYN cookies vulnerability CVE-2022-367955.3 Medium
- Show moreLoading…