VYPR

CWE-190

Integer Overflow or Wraparound

BaseStableLikelihood: Medium

Description

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Hierarchy (View 1000)

Parents

Children

Related attack patterns (CAPEC)

CAPEC-92

CVEs mapped to this weakness (3,387)

page 159 of 170
  • CVE-2024-22861HigJan 27, 2024
    risk 0.00cvss 7.5epss 0.01

    Integer overflow vulnerability in FFmpeg before n6.1, allows attackers to cause a denial of service (DoS) via the avcodec/osq module.

  • CVE-2024-22862CriJan 27, 2024
    risk 0.00cvss 9.8epss 0.01

    Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser.

  • CVE-2024-22860CriJan 27, 2024
    risk 0.00cvss 9.8epss 0.01

    Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxl_anim_read_packet component in the JPEG XL Animation decoder.

  • CVE-2024-22211LowJan 19, 2024
    risk 0.00cvss 3.7epss 0.01

    FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in `freerdp_bitmap_planar_context_reset` leads to heap-buffer overflow. This affects FreeRDP based clients. FreeRDP based server implementations and…

  • CVE-2021-33631MedJan 18, 2024
    risk 0.00cvss 5.5epss 0.00

    Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3, from 5.10.0-60.18.0 before 5.10.0-183.0.0.

  • CVE-2023-52339MedJan 12, 2024
    risk 0.00cvss 6.5epss 0.01

    In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing. It may result in buffer overflows.

  • CVE-2024-21646CriJan 9, 2024
    risk 0.00cvss 9.8epss 0.05

    Azure uAMQP is a general purpose C library for AMQP 1.0. The UAMQP library is used by several clients to implement AMQP protocol communication. When clients using this library receive a crafted binary type data, an integer overflow or wraparound or memory safety issue can occur…

  • CVE-2023-46228HigOct 19, 2023
    risk 0.00cvss 7.8epss 0.00

    zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c.

  • CVE-2023-42752MedOct 13, 2023
    risk 0.00cvss 5.5epss 0.00

    An integer overflow flaw was found in the Linux kernel. This issue leads to the kernel allocating `skb_shared_info` in the userspace, which is exploitable in systems without SMAP protection since `skb_shared_info` contains references to function pointers.

  • CVE-2023-4722MedSep 1, 2023
    risk 0.00cvss 5.5epss 0.00

    Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.3-DEV.

  • CVE-2023-36328CriSep 1, 2023
    risk 0.00cvss 9.8epss 0.01

    Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS).

  • CVE-2023-36327CriSep 1, 2023
    risk 0.00cvss 9.8epss 0.01

    Integer Overflow vulnerability in RELIC before commit 421f2e91cf2ba42473d4d54daf24e295679e290e, allows attackers to execute arbitrary code and cause a denial of service in pos argument in bn_get_prime function.

  • CVE-2023-36326CriSep 1, 2023
    risk 0.00cvss 9.8epss 0.01

    Integer Overflow vulnerability in RELIC before commit 34580d840469361ba9b5f001361cad659687b9ab, allows attackers to execute arbitrary code, cause a denial of service, and escalate privileges when calling realloc function in bn_grow function.

  • CVE-2023-40022HigAug 24, 2023
    risk 0.00cvss 7.8epss 0.00

    Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.6.0 and prior are vulnerable to integer overflow in `consume_count` of `src/gnu_v2/cplus-dem.c`. The overflow check is valid logic but, is missing the modulus if the block once compiled. The…

  • CVE-2022-41409HigJul 18, 2023
    risk 0.00cvss 7.5epss 0.01

    Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.

  • CVE-2023-38403HigJul 17, 2023
    risk 0.00cvss 7.5epss 0.02

    iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.

  • CVE-2023-33204HigMay 18, 2023
    risk 0.00cvss 7.8epss 0.00

    sysstat through 12.7.2 allows a multiplication integer overflow in check_overflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377.

  • CVE-2021-33797CriApr 17, 2023
    risk 0.00cvss 9.8epss 0.01

    Buffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. An integer overflow happens when js_strtod() reads in floating point exponent, which leads to a buffer overflow in the pointer *d.

  • CVE-2022-48468MedApr 13, 2023
    risk 0.00cvss 5.5epss 0.00

    protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.

  • CVE-2023-28097HigMar 15, 2023
    risk 0.00cvss 7.5epss 0.01

    OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.9 and 3.2.6, a malformed SIP message containing a large _Content-Length_ value and a specially crafted Request-URI causes a segmentation fault in OpenSIPS. This issue occurs when a large…