VYPR

CWE-369

Divide By Zero

BaseDraftLikelihood: Medium

Description

The product divides a value by zero.

This weakness typically occurs when an unexpected value is provided to the product, or if an error occurs that is not properly detected. It frequently occurs in calculations involving physical dimensions such as size, length, width, and height.

Hierarchy (View 1000)

Parents

Children

none

CVEs mapped to this weakness (465)

page 13 of 24
  • CVE-2019-10021MedMar 25, 2019
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nComps.

  • CVE-2019-10020MedMar 25, 2019
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu at Splash.cc for x Bresenham parameters.

  • CVE-2019-10019MedMar 25, 2019
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PSOutputDev::checkPageSlice at PSOutputDev.cc for nStripes.

  • CVE-2019-10018MedMar 25, 2019
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the psOpIdiv case.

  • CVE-2018-19872MedMar 21, 2019
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp.

  • CVE-2018-18521MedOct 19, 2018
    risk 0.36cvss 5.5epss 0.02

    Divide-by-zero vulnerabilities in the function arlib_add_symbols() in arlib.c in elfutils 0.174 allow remote attackers to cause a denial of service (application crash) with a crafted ELF file, as demonstrated by eu-ranlib, because a zero sh_entsize is mishandled.

  • CVE-2018-18190MedOct 9, 2018
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in GoPro gpmf-parser before 1.2.1. There is a divide-by-zero error in GPMF_ScaledData in GPMF_parser.c.

  • CVE-2017-16890MedJul 9, 2018
    risk 0.36cvss 5.5epss 0.01

    SWFTools 0.9.2 has a divide-by-zero error in the wav_convert2mono function in lib/wav.c because the align value may be zero.

  • CVE-2018-10016MedApr 11, 2018
    risk 0.36cvss 5.5epss 0.01

    Netwide Assembler (NASM) 2.14rc0 has a division-by-zero vulnerability in the expr5 function in asm/eval.c via a malformed input file.

  • CVE-2014-8130MedMar 12, 2018
    risk 0.36cvss 6.5epss 0.04

    The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image that is mishandled by the TIFFWriteScanline function in…

  • CVE-2017-15266MedOct 11, 2017
    risk 0.36cvss 5.5epss 0.01

    In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTOR_wav_extract_method in wav_extractor.c via a zero sample rate.

  • CVE-2017-15025MedOct 5, 2017
    risk 0.36cvss 5.5epss 0.02

    decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted ELF file.

  • CVE-2017-6271MedSep 22, 2017
    risk 0.36cvss 5.5epss 0.00

    NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiCreateAllocation where untrusted user input is used as a divisor without validation while processing block linear information which may lead to a potential divide by zero and…

  • CVE-2017-6270MedSep 22, 2017
    risk 0.36cvss 5.5epss 0.00

    NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiCreateAllocation where untrusted user input is used as a divisor without validation during a calculation which may lead to a potential divide by zero and denial of service.

  • CVE-2017-14106MedSep 1, 2017
    risk 0.36cvss 5.5epss 0.00

    The tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a denial of service (__tcp_select_window divide-by-zero error and system crash) by triggering a disconnect within a certain tcp_recvmsg code path.

  • CVE-2016-10506MedAug 30, 2017
    risk 0.36cvss 6.5epss 0.03

    Division-by-zero vulnerabilities in the functions opj_pi_next_cprl, opj_pi_next_pcrl, and opj_pi_next_rpcl in pi.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service (application crash) via crafted j2k files.

  • CVE-2014-0142MedAug 10, 2017
    risk 0.36cvss 5.5epss 0.00

    QEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero error and crash) via a zero value in the (1) tracks field to the seek_to_sector function in block/parallels.c or (2) extent_size field in the bochs function in block/bochs.c.

  • CVE-2017-11546MedJul 31, 2017
    risk 0.36cvss 5.5epss 0.01

    The insert_note_steps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mid file. NOTE: a crash might be relevant when using the --background option.

  • CVE-2016-9960MedJun 6, 2017
    risk 0.36cvss 5.5epss 0.01

    game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).

  • CVE-2017-9302MedMay 29, 2017
    risk 0.36cvss 5.5epss 0.02

    RealPlayer 16.0.2.32 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp4 file.