VYPR

CWE-190

Integer Overflow or Wraparound

BaseStableLikelihood: Medium

Description

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Hierarchy (View 1000)

Parents

Children

Related attack patterns (CAPEC)

CAPEC-92

CVEs mapped to this weakness (3,398)

page 44 of 170
  • CVE-2025-49531HigJul 8, 2025
    risk 0.51cvss 7.8epss 0.00

    Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a…

  • CVE-2025-49742HigJul 8, 2025
    risk 0.51cvss 7.8epss 0.00

    Integer overflow or wraparound in Microsoft Graphics Component allows an authorized attacker to execute code locally.

  • CVE-2025-49689HigJul 8, 2025
    risk 0.51cvss 7.8epss 0.01

    Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.

  • CVE-2025-48816HigJul 8, 2025
    risk 0.51cvss 7.8epss 0.00

    Integer overflow or wraparound in HID class driver allows an authorized attacker to elevate privileges locally.

  • CVE-2025-38193HigJul 4, 2025
    risk 0.51cvss 7.8epss 0.00

    In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: reject invalid perturb period Gerrard Tai reported that SFQ perturb_period has no range check yet, and this can be used to trigger a race condition fixed in a separate patch. We want to…

  • CVE-2022-50167HigJun 18, 2025
    risk 0.51cvss 7.8epss 0.00

    In the Linux kernel, the following vulnerability has been resolved: bpf: fix potential 32-bit overflow when accessing ARRAY map element If BPF array map is bigger than 4GB, element pointer calculation can overflow because both index and elem_size are u32. Fix this everywhere…

  • CVE-2025-30327HigJun 10, 2025
    risk 0.51cvss 7.8epss 0.00

    InCopy versions 20.2, 19.5.3 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious…

  • CVE-2025-32718HigJun 10, 2025
    risk 0.51cvss 7.8epss 0.00

    Integer overflow or wraparound in Windows SMB allows an authorized attacker to elevate privileges locally.

  • CVE-2025-5914HigJun 9, 2025
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in…

  • CVE-2025-43556HigMay 13, 2025
    risk 0.51cvss 7.8epss 0.00

    Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a…

  • CVE-2025-43547HigMay 13, 2025
    risk 0.51cvss 7.8epss 0.00

    Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a…

  • CVE-2025-30325HigMay 13, 2025
    risk 0.51cvss 7.8epss 0.00

    Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open…

  • CVE-2024-45575HigMay 6, 2025
    risk 0.51cvss 7.8epss 0.00

    Memory corruption Camera kernel when large number of devices are attached through userspace.

  • CVE-2025-2760HigApr 23, 2025
    risk 0.51cvss 7.8epss 0.13

    GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a…

  • CVE-2025-22081HigApr 16, 2025
    risk 0.51cvss 7.8epss 0.00

    In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix a couple integer overflows on 32bit systems On 32bit systems the "off + sizeof(struct NTFS_DE)" addition can have an integer wrapping issue. Fix it by using size_add().

  • CVE-2025-26642HigApr 8, 2025
    risk 0.51cvss 7.8epss 0.01

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

  • CVE-2025-26639HigApr 8, 2025
    risk 0.51cvss 7.8epss 0.01

    Integer overflow or wraparound in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

  • CVE-2025-22001HigApr 3, 2025
    risk 0.51cvss 7.8epss 0.00

    In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix integer overflow in qaic_validate_req() These are u64 variables that come from the user via qaic_attach_slice_bo_ioctl(). Use check_add_overflow() to ensure that the math doesn't have an…

  • CVE-2024-36337HigApr 2, 2025
    risk 0.51cvss 7.9epss 0.00

    Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss of confidentiality, integrity or availability.

  • CVE-2024-36336HigApr 2, 2025
    risk 0.51cvss 7.9epss 0.00

    Integer overflow within the AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to a loss of confidentiality, integrity, or availability.