CWE-190
Integer Overflow or Wraparound
Description
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-92
CVEs mapped to this weakness (3,387)
page 160 of 170| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-25155 | Med | 0.00 | 5.5 | 0.01 | Mar 2, 2023 | Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted `SRANDMEMBER`, `ZRANDMEMBER`, and `HRANDFIELD` commands can trigger an integer overflow, resulting in a runtime assertion and termination of the Redis server process. This problem… | ||
| CVE-2021-4327 | Med | 0.00 | 5.5 | 0.01 | Mar 1, 2023 | A vulnerability was found in SerenityOS. It has been rated as critical. Affected by this issue is the function initialize_typed_array_from_array_buffer in the library Userland/Libraries/LibJS/Runtime/TypedArray.cpp. The manipulation leads to integer overflow. The exploit has… | ||
| CVE-2023-23144 | Med | 0.00 | 5.5 | 0.00 | Jan 20, 2023 | Integer overflow vulnerability in function Q_DecCoordOnUnitSphere file bifs/unquantize.c in GPAC version 2.2-rev0-gab012bbfb-master. | ||
| CVE-2023-23559 | Hig | 0.00 | 7.8 | 0.00 | Jan 13, 2023 | In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition. | ||
| CVE-2022-4398 | Hig | 0.00 | 7.8 | 0.00 | Dec 10, 2022 | Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0. | ||
| CVE-2022-45934 | Hig | 0.00 | 7.8 | 0.01 | Nov 27, 2022 | An issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c has an integer wraparound via L2CAP_CONF_REQ packets. | ||
| CVE-2022-35289 | Cri | 0.00 | 9.8 | 0.01 | Oct 11, 2022 | A write-what-where condition in hermes caused by an integer overflow, prior to commit 5b6255ae049fa4641791e47fad994e8e8c4da374 allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes… | ||
| CVE-2022-1718 | Hig | 0.00 | 7.5 | 0.01 | Sep 29, 2022 | The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in GitHub repository polonel/trudesk prior to 1.2.2. This can lead to Denial of… | ||
| CVE-2022-2566 | Cri | 0.00 | 9.0 | 0.01 | Sep 23, 2022 | A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in `build_open_gop_key_points()` goes through all entries in the loop and adds `sc->ctts_data[i].count` to `sc->sample_offsets_count`. This can lead to an integer overflow resulting in a… | ||
| CVE-2022-39842 | Med | 0.00 | 6.1 | 0.01 | Sep 5, 2022 | An issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conflict of size_t versus int, causing an integer overflow and bypassing the size check. After that, because it is used as the third… | ||
| CVE-2022-34612 | Med | 0.00 | 5.5 | 0.00 | Jul 27, 2022 | Rizin v0.4.0 and below was discovered to contain an integer overflow via the function get_long_object(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted binary. | ||
| CVE-2021-46829 | Hig | 0.00 | 7.8 | 0.01 | Jul 24, 2022 | GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit… | ||
| CVE-2022-2454 | Hig | 0.00 | 7.8 | 0.00 | Jul 19, 2022 | Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV. | ||
| CVE-2022-32073 | Cri | 0.00 | 9.8 | 0.02 | Jul 13, 2022 | WolfSSH v1.4.7 was discovered to contain an integer overflow via the function wolfSSH_SFTP_RecvRMDIR. | ||
| CVE-2022-2285 | Hig | 0.00 | 7.8 | 0.01 | Jul 2, 2022 | Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0. | ||
| CVE-2022-33068 | Med | 0.00 | 5.5 | 0.01 | Jun 23, 2022 | An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors. | ||
| CVE-2022-32546 | Hig | 0.00 | 7.8 | 0.01 | Jun 16, 2022 | A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to… | ||
| CVE-2022-32545 | Hig | 0.00 | 7.8 | 0.01 | Jun 16, 2022 | A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to… | ||
| CVE-2022-1926 | Med | 0.00 | 4.9 | 0.01 | May 31, 2022 | Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.3. | ||
| CVE-2022-1754 | Med | 0.00 | 6.5 | 0.01 | May 20, 2022 | Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.2. |
- risk 0.00cvss 5.5epss 0.01
Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted `SRANDMEMBER`, `ZRANDMEMBER`, and `HRANDFIELD` commands can trigger an integer overflow, resulting in a runtime assertion and termination of the Redis server process. This problem…
- risk 0.00cvss 5.5epss 0.01
A vulnerability was found in SerenityOS. It has been rated as critical. Affected by this issue is the function initialize_typed_array_from_array_buffer in the library Userland/Libraries/LibJS/Runtime/TypedArray.cpp. The manipulation leads to integer overflow. The exploit has…
- risk 0.00cvss 5.5epss 0.00
Integer overflow vulnerability in function Q_DecCoordOnUnitSphere file bifs/unquantize.c in GPAC version 2.2-rev0-gab012bbfb-master.
- risk 0.00cvss 7.8epss 0.00
In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.
- risk 0.00cvss 7.8epss 0.00
Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0.
- risk 0.00cvss 7.8epss 0.01
An issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c has an integer wraparound via L2CAP_CONF_REQ packets.
- risk 0.00cvss 9.8epss 0.01
A write-what-where condition in hermes caused by an integer overflow, prior to commit 5b6255ae049fa4641791e47fad994e8e8c4da374 allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes…
- risk 0.00cvss 7.5epss 0.01
The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in GitHub repository polonel/trudesk prior to 1.2.2. This can lead to Denial of…
- risk 0.00cvss 9.0epss 0.01
A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in `build_open_gop_key_points()` goes through all entries in the loop and adds `sc->ctts_data[i].count` to `sc->sample_offsets_count`. This can lead to an integer overflow resulting in a…
- risk 0.00cvss 6.1epss 0.01
An issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conflict of size_t versus int, causing an integer overflow and bypassing the size check. After that, because it is used as the third…
- risk 0.00cvss 5.5epss 0.00
Rizin v0.4.0 and below was discovered to contain an integer overflow via the function get_long_object(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted binary.
- risk 0.00cvss 7.8epss 0.01
GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit…
- risk 0.00cvss 7.8epss 0.00
Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV.
- risk 0.00cvss 9.8epss 0.02
WolfSSH v1.4.7 was discovered to contain an integer overflow via the function wolfSSH_SFTP_RecvRMDIR.
- risk 0.00cvss 7.8epss 0.01
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.
- risk 0.00cvss 5.5epss 0.01
An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.
- risk 0.00cvss 7.8epss 0.01
A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to…
- risk 0.00cvss 7.8epss 0.01
A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to…
- risk 0.00cvss 4.9epss 0.01
Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.3.
- risk 0.00cvss 6.5epss 0.01
Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.2.