CWE-197
Numeric Truncation Error
Description
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.
Hierarchy (View 1000)
Parents
Children
none
CVEs mapped to this weakness (79)
page 3 of 4| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-30022 | Hig | 0.49 | 7.5 | 0.02 | May 14, 2024 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | ||
| CVE-2024-30015 | Hig | 0.49 | 7.5 | 0.01 | May 14, 2024 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | ||
| CVE-2024-30014 | Hig | 0.49 | 7.5 | 0.01 | May 14, 2024 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | ||
| CVE-2024-38044 | Hig | 0.47 | 7.2 | 0.02 | Jul 9, 2024 | DHCP Server Service Remote Code Execution Vulnerability | ||
| CVE-2026-69578 | Hig | 0.46 | 7.0 | 0.00 | Sep 8, 2026 | Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2024-37337 | Hig | 0.46 | 7.1 | 0.02 | Sep 10, 2024 | Microsoft SQL Server Native Scoring Information Disclosure Vulnerability | ||
| CVE-2022-34676 | Hig | 0.46 | 7.1 | 0.00 | Dec 30, 2022 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read may lead to denial of service, information disclosure, or data tampering. | ||
| CVE-2026-65798 | Med | 0.44 | 6.7 | 0.00 | Aug 11, 2026 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-65797 | Med | 0.44 | 6.7 | 0.00 | Aug 11, 2026 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-65795 | Med | 0.44 | 6.7 | 0.00 | Aug 11, 2026 | Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62883 | Med | 0.44 | 6.7 | 0.00 | Aug 11, 2026 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62881 | Med | 0.44 | 6.7 | 0.00 | Aug 11, 2026 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62769 | Med | 0.44 | 6.7 | 0.00 | Aug 11, 2026 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2024-21429 | Med | 0.44 | 6.8 | 0.01 | Mar 12, 2024 | Windows USB Hub Driver Remote Code Execution Vulnerability | ||
| CVE-2026-6679 | Hig | 0.42 | 7.5 | 0.01 | Jun 25, 2026 | A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an undersized buffer to be allocated and… | ||
| CVE-2026-42944 | Hig | 0.42 | 7.5 | 0.01 | May 20, 2026 | NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when encoding multiple NSID and/or DNS Cookie EDNS and/or EDNS Padding options in the reply packet. The relevant options ('nsid', 'answer-cookie', 'pad-responses'… | ||
| CVE-2024-38086 | Med | 0.42 | 6.4 | 0.01 | Jul 9, 2024 | Azure Kinect SDK Remote Code Execution Vulnerability | ||
| CVE-2023-36641 | Med | 0.42 | 6.5 | 0.01 | Nov 14, 2023 | A numeric truncation error in Fortinet FortiProxy version 7.2.0 through 7.2.4, FortiProxy version 7.0.0 through 7.0.10, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1, all versions, FortiProxy 1.0 all versions, FortiOS version 7.4.0, FortiOS version… | ||
| CVE-2026-40380 | Med | 0.40 | 6.2 | 0.00 | May 12, 2026 | Heap-based buffer overflow in Volume Manager Extension Driver allows an authorized attacker to execute code with a physical attack. | ||
| CVE-2026-68895 | Med | 0.36 | 5.5 | 0.00 | Sep 8, 2026 | Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally. |
- risk 0.49cvss 7.5epss 0.02
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.01
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.01
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- risk 0.47cvss 7.2epss 0.02
DHCP Server Service Remote Code Execution Vulnerability
- risk 0.46cvss 7.0epss 0.00
Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.1epss 0.02
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
- risk 0.46cvss 7.1epss 0.00
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read may lead to denial of service, information disclosure, or data tampering.
- risk 0.44cvss 6.7epss 0.00
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.7epss 0.00
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.7epss 0.00
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.7epss 0.00
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.7epss 0.00
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.7epss 0.00
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.8epss 0.01
Windows USB Hub Driver Remote Code Execution Vulnerability
- risk 0.42cvss 7.5epss 0.01
A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an undersized buffer to be allocated and…
- risk 0.42cvss 7.5epss 0.01
NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when encoding multiple NSID and/or DNS Cookie EDNS and/or EDNS Padding options in the reply packet. The relevant options ('nsid', 'answer-cookie', 'pad-responses'…
- risk 0.42cvss 6.4epss 0.01
Azure Kinect SDK Remote Code Execution Vulnerability
- risk 0.42cvss 6.5epss 0.01
A numeric truncation error in Fortinet FortiProxy version 7.2.0 through 7.2.4, FortiProxy version 7.0.0 through 7.0.10, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1, all versions, FortiProxy 1.0 all versions, FortiOS version 7.4.0, FortiOS version…
- risk 0.40cvss 6.2epss 0.00
Heap-based buffer overflow in Volume Manager Extension Driver allows an authorized attacker to execute code with a physical attack.
- risk 0.36cvss 5.5epss 0.00
Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally.