CWE-190
Integer Overflow or Wraparound
Description
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-92
CVEs mapped to this weakness (3,387)
page 159 of 170| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-22861 | Hig | 0.00 | 7.5 | 0.01 | Jan 27, 2024 | Integer overflow vulnerability in FFmpeg before n6.1, allows attackers to cause a denial of service (DoS) via the avcodec/osq module. | ||
| CVE-2024-22862 | Cri | 0.00 | 9.8 | 0.01 | Jan 27, 2024 | Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser. | ||
| CVE-2024-22860 | Cri | 0.00 | 9.8 | 0.01 | Jan 27, 2024 | Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxl_anim_read_packet component in the JPEG XL Animation decoder. | ||
| CVE-2024-22211 | Low | 0.00 | 3.7 | 0.01 | Jan 19, 2024 | FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in `freerdp_bitmap_planar_context_reset` leads to heap-buffer overflow. This affects FreeRDP based clients. FreeRDP based server implementations and… | ||
| CVE-2021-33631 | Med | 0.00 | 5.5 | 0.00 | Jan 18, 2024 | Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3, from 5.10.0-60.18.0 before 5.10.0-183.0.0. | ||
| CVE-2023-52339 | Med | 0.00 | 6.5 | 0.01 | Jan 12, 2024 | In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing. It may result in buffer overflows. | ||
| CVE-2024-21646 | Cri | 0.00 | 9.8 | 0.05 | Jan 9, 2024 | Azure uAMQP is a general purpose C library for AMQP 1.0. The UAMQP library is used by several clients to implement AMQP protocol communication. When clients using this library receive a crafted binary type data, an integer overflow or wraparound or memory safety issue can occur… | ||
| CVE-2023-46228 | Hig | 0.00 | 7.8 | 0.00 | Oct 19, 2023 | zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c. | ||
| CVE-2023-42752 | Med | 0.00 | 5.5 | 0.00 | Oct 13, 2023 | An integer overflow flaw was found in the Linux kernel. This issue leads to the kernel allocating `skb_shared_info` in the userspace, which is exploitable in systems without SMAP protection since `skb_shared_info` contains references to function pointers. | ||
| CVE-2023-4722 | Med | 0.00 | 5.5 | 0.00 | Sep 1, 2023 | Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.3-DEV. | ||
| CVE-2023-36328 | Cri | 0.00 | 9.8 | 0.01 | Sep 1, 2023 | Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS). | ||
| CVE-2023-36327 | Cri | 0.00 | 9.8 | 0.01 | Sep 1, 2023 | Integer Overflow vulnerability in RELIC before commit 421f2e91cf2ba42473d4d54daf24e295679e290e, allows attackers to execute arbitrary code and cause a denial of service in pos argument in bn_get_prime function. | ||
| CVE-2023-36326 | Cri | 0.00 | 9.8 | 0.01 | Sep 1, 2023 | Integer Overflow vulnerability in RELIC before commit 34580d840469361ba9b5f001361cad659687b9ab, allows attackers to execute arbitrary code, cause a denial of service, and escalate privileges when calling realloc function in bn_grow function. | ||
| CVE-2023-40022 | Hig | 0.00 | 7.8 | 0.00 | Aug 24, 2023 | Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.6.0 and prior are vulnerable to integer overflow in `consume_count` of `src/gnu_v2/cplus-dem.c`. The overflow check is valid logic but, is missing the modulus if the block once compiled. The… | ||
| CVE-2022-41409 | Hig | 0.00 | 7.5 | 0.01 | Jul 18, 2023 | Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input. | ||
| CVE-2023-38403 | Hig | 0.00 | 7.5 | 0.02 | Jul 17, 2023 | iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field. | ||
| CVE-2023-33204 | Hig | 0.00 | 7.8 | 0.00 | May 18, 2023 | sysstat through 12.7.2 allows a multiplication integer overflow in check_overflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377. | ||
| CVE-2021-33797 | Cri | 0.00 | 9.8 | 0.01 | Apr 17, 2023 | Buffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. An integer overflow happens when js_strtod() reads in floating point exponent, which leads to a buffer overflow in the pointer *d. | ||
| CVE-2022-48468 | Med | 0.00 | 5.5 | 0.00 | Apr 13, 2023 | protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member. | ||
| CVE-2023-28097 | Hig | 0.00 | 7.5 | 0.01 | Mar 15, 2023 | OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.9 and 3.2.6, a malformed SIP message containing a large _Content-Length_ value and a specially crafted Request-URI causes a segmentation fault in OpenSIPS. This issue occurs when a large… |
- risk 0.00cvss 7.5epss 0.01
Integer overflow vulnerability in FFmpeg before n6.1, allows attackers to cause a denial of service (DoS) via the avcodec/osq module.
- risk 0.00cvss 9.8epss 0.01
Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser.
- risk 0.00cvss 9.8epss 0.01
Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxl_anim_read_packet component in the JPEG XL Animation decoder.
- risk 0.00cvss 3.7epss 0.01
FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in `freerdp_bitmap_planar_context_reset` leads to heap-buffer overflow. This affects FreeRDP based clients. FreeRDP based server implementations and…
- risk 0.00cvss 5.5epss 0.00
Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3, from 5.10.0-60.18.0 before 5.10.0-183.0.0.
- risk 0.00cvss 6.5epss 0.01
In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing. It may result in buffer overflows.
- risk 0.00cvss 9.8epss 0.05
Azure uAMQP is a general purpose C library for AMQP 1.0. The UAMQP library is used by several clients to implement AMQP protocol communication. When clients using this library receive a crafted binary type data, an integer overflow or wraparound or memory safety issue can occur…
- risk 0.00cvss 7.8epss 0.00
zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c.
- risk 0.00cvss 5.5epss 0.00
An integer overflow flaw was found in the Linux kernel. This issue leads to the kernel allocating `skb_shared_info` in the userspace, which is exploitable in systems without SMAP protection since `skb_shared_info` contains references to function pointers.
- risk 0.00cvss 5.5epss 0.00
Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.3-DEV.
- risk 0.00cvss 9.8epss 0.01
Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS).
- risk 0.00cvss 9.8epss 0.01
Integer Overflow vulnerability in RELIC before commit 421f2e91cf2ba42473d4d54daf24e295679e290e, allows attackers to execute arbitrary code and cause a denial of service in pos argument in bn_get_prime function.
- risk 0.00cvss 9.8epss 0.01
Integer Overflow vulnerability in RELIC before commit 34580d840469361ba9b5f001361cad659687b9ab, allows attackers to execute arbitrary code, cause a denial of service, and escalate privileges when calling realloc function in bn_grow function.
- risk 0.00cvss 7.8epss 0.00
Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.6.0 and prior are vulnerable to integer overflow in `consume_count` of `src/gnu_v2/cplus-dem.c`. The overflow check is valid logic but, is missing the modulus if the block once compiled. The…
- risk 0.00cvss 7.5epss 0.01
Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.
- risk 0.00cvss 7.5epss 0.02
iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.
- risk 0.00cvss 7.8epss 0.00
sysstat through 12.7.2 allows a multiplication integer overflow in check_overflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377.
- risk 0.00cvss 9.8epss 0.01
Buffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. An integer overflow happens when js_strtod() reads in floating point exponent, which leads to a buffer overflow in the pointer *d.
- risk 0.00cvss 5.5epss 0.00
protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.
- risk 0.00cvss 7.5epss 0.01
OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.9 and 3.2.6, a malformed SIP message containing a large _Content-Length_ value and a specially crafted Request-URI causes a segmentation fault in OpenSIPS. This issue occurs when a large…