CWE-190
Integer Overflow or Wraparound
Description
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-92
CVEs mapped to this weakness (3,399)
page 109 of 170| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-37976 | Med | 0.44 | 6.7 | 0.01 | Oct 8, 2024 | Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability | ||
| CVE-2024-41000 | Hig | 0.44 | 7.8 | 0.00 | Jul 12, 2024 | In the Linux kernel, the following vulnerability has been resolved: block/ioctl: prefer different overflow check Running syzkaller with the newly reintroduced signed integer overflow sanitizer shows this report: [ 62.982337] ------------[ cut here ]------------ [ … | ||
| CVE-2024-40994 | Hig | 0.44 | 7.8 | 0.00 | Jul 12, 2024 | In the Linux kernel, the following vulnerability has been resolved: ptp: fix integer overflow in max_vclocks_store On 32bit systems, the "4 * max" multiply can overflow. Use kcalloc() to do the allocation to prevent this. | ||
| CVE-2024-26184 | Med | 0.44 | 6.8 | 0.01 | Jul 9, 2024 | Secure Boot Security Feature Bypass Vulnerability | ||
| CVE-2023-43545 | Med | 0.44 | 6.7 | 0.00 | Jun 3, 2024 | Memory corruption when more scan frequency list or channels are sent from the user space. | ||
| CVE-2024-35905 | Hig | 0.44 | 7.8 | 0.00 | May 19, 2024 | In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of… | ||
| CVE-2024-30021 | Med | 0.44 | 6.8 | 0.01 | May 14, 2024 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability | ||
| CVE-2024-30012 | Med | 0.44 | 6.8 | 0.01 | May 14, 2024 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability | ||
| CVE-2024-30005 | Med | 0.44 | 6.8 | 0.01 | May 14, 2024 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability | ||
| CVE-2024-30004 | Med | 0.44 | 6.8 | 0.01 | May 14, 2024 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability | ||
| CVE-2024-30003 | Med | 0.44 | 6.8 | 0.01 | May 14, 2024 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability | ||
| CVE-2024-30001 | Med | 0.44 | 6.8 | 0.01 | May 14, 2024 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability | ||
| CVE-2024-30000 | Med | 0.44 | 6.8 | 0.01 | May 14, 2024 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability | ||
| CVE-2024-29999 | Med | 0.44 | 6.8 | 0.01 | May 14, 2024 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability | ||
| CVE-2024-29997 | Med | 0.44 | 6.8 | 0.01 | May 14, 2024 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability | ||
| CVE-2024-26884 | Hig | 0.44 | 7.8 | 0.00 | Apr 17, 2024 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix hashtab overflow check on 32-bit arches The hashtab code relies on roundup_pow_of_two() to compute the number of hash buckets, and contains an overflow check by checking if the resulting value is 0.… | ||
| CVE-2024-26171 | Med | 0.44 | 6.7 | 0.01 | Apr 9, 2024 | Secure Boot Security Feature Bypass Vulnerability | ||
| CVE-2024-3077 | Med | 0.44 | 6.8 | 0.00 | Mar 29, 2024 | An malicious BLE device can crash BLE victim device by sending malformed gatt packet | ||
| CVE-2024-20025 | Med | 0.44 | 6.7 | 0.00 | Mar 4, 2024 | In da, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541686; Issue ID: ALPS08541686. | ||
| CVE-2023-33038 | Med | 0.44 | 6.7 | 0.00 | Jan 2, 2024 | Memory corruption while receiving a message in Bus Socket Transport Server. |
- risk 0.44cvss 6.7epss 0.01
Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
- risk 0.44cvss 7.8epss 0.00
In the Linux kernel, the following vulnerability has been resolved: block/ioctl: prefer different overflow check Running syzkaller with the newly reintroduced signed integer overflow sanitizer shows this report: [ 62.982337] ------------[ cut here ]------------ [ …
- risk 0.44cvss 7.8epss 0.00
In the Linux kernel, the following vulnerability has been resolved: ptp: fix integer overflow in max_vclocks_store On 32bit systems, the "4 * max" multiply can overflow. Use kcalloc() to do the allocation to prevent this.
- risk 0.44cvss 6.8epss 0.01
Secure Boot Security Feature Bypass Vulnerability
- risk 0.44cvss 6.7epss 0.00
Memory corruption when more scan frequency list or channels are sent from the user space.
- risk 0.44cvss 7.8epss 0.00
In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of…
- risk 0.44cvss 6.8epss 0.01
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- risk 0.44cvss 6.8epss 0.01
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- risk 0.44cvss 6.8epss 0.01
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- risk 0.44cvss 6.8epss 0.01
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- risk 0.44cvss 6.8epss 0.01
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- risk 0.44cvss 6.8epss 0.01
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- risk 0.44cvss 6.8epss 0.01
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- risk 0.44cvss 6.8epss 0.01
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- risk 0.44cvss 6.8epss 0.01
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- risk 0.44cvss 7.8epss 0.00
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix hashtab overflow check on 32-bit arches The hashtab code relies on roundup_pow_of_two() to compute the number of hash buckets, and contains an overflow check by checking if the resulting value is 0.…
- risk 0.44cvss 6.7epss 0.01
Secure Boot Security Feature Bypass Vulnerability
- risk 0.44cvss 6.8epss 0.00
An malicious BLE device can crash BLE victim device by sending malformed gatt packet
- risk 0.44cvss 6.7epss 0.00
In da, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541686; Issue ID: ALPS08541686.
- risk 0.44cvss 6.7epss 0.00
Memory corruption while receiving a message in Bus Socket Transport Server.