Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

CVEs (3,306)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-35312 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Jul 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability
CVE-2023-32051 1Microsoft 1Raw Image Extension Jun 17, 2026 Jul 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Raw Image Extension Remote Code Execution Vulnerability
CVE-2023-22667 1Qualcomm 200205 Firmware 215 Firmware315 5g Iot Firmware+197 more Jun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption in Audio while allocating the ion buffer during the music playback.
CVE-2023-20756 1Google 1Android Jun 17, 2026 Jul 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...Show more In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07510064; Issue ID: ALPS07549928.Show less
CVE-2023-20755 1Google 1Android Jun 17, 2026 Jul 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...Show more In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07510064; Issue ID: ALPS07509605.Show less
CVE-2023-20693 2Google Linuxfoundation 2Android Yocto Jun 17, 2026 Jul 4, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 In wlan firmware, there is possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation....Show more In wlan firmware, there is possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664711; Issue ID: ALPS07664711.Show less
CVE-2023-20691 2Google Linuxfoundation 2Android Yocto Jun 17, 2026 Jul 4, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Pa...Show more In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664731; Issue ID: ALPS07664731.Show less
CVE-2023-20690 2Google Linuxfoundation 2Android Yocto Jun 17, 2026 Jul 4, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Pa...Show more In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664735; Issue ID: ALPS07664735.Show less
CVE-2023-20689 2Google Linuxfoundation 2Android Yocto Jun 17, 2026 Jul 4, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Pa...Show more In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664741; Issue ID: ALPS07664741.Show less
CVE-2023-25516 1Nvidia 1Gpu Display Driver Jun 17, 2026 Jul 4, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause an integer overflow, which may lead to information disclosure and denial of service.
CVE-2023-21193 1Google 1Android Jun 17, 2026 Jun 28, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 In VideoFrame of VideoFrame.h, there is a possible abort due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exp...Show more In VideoFrame of VideoFrame.h, there is a possible abort due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-233006499Show less
CVE-2023-25004 1Autodesk 17Alias AutocadAutocad Advance Steel+14 more Jun 17, 2026 Jun 27, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lead to code execution.
CVE-2022-48336 1Widevine 1Trusted Application Jun 17, 2026 Jun 26, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagParseAndStoreData integer overflow and resultant buffer overflow.
CVE-2022-48335 1Widevine 1Trusted Application Jun 17, 2026 Jun 26, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagVerifyProvisioning integer overflow and resultant buffer overflow.
CVE-2022-48334 1Widevine 1Trusted Application Jun 17, 2026 Jun 26, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys total_len+file_name_len integer overflow and resultant buffer overflow.
CVE-2022-48333 1Widevine 1Trusted Application Jun 17, 2026 Jun 26, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys prefix_len+feature_name_len integer overflow and resultant buffer overflow.
CVE-2022-48332 1Widevine 1Trusted Application Jun 17, 2026 Jun 26, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys file_name_len integer overflow and resultant buffer overflow.
CVE-2022-48331 1Widevine 1Trusted Application Jun 17, 2026 Jun 26, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys feature_name_len integer overflow and resultant buffer overflow.
CVE-2023-32434 1Apple 4Ipados Iphone OsMacos+1 more Jun 17, 2026 Jun 23, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, watchOS 8.8.1, iOS 16.5.1 and iPadOS 16.5...Show more An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, watchOS 8.8.1, iOS 16.5.1 and iPadOS 16.5.1, macOS Ventura 13.4.1. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.Show less
CVE-2020-20335 1Kilo Project 1Kilo Jun 17, 2026 Jun 20, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Buffer Overflow vulnerability in Antirez Kilo before commit 7709a04ae8520c5b04d261616098cebf742f5a23 allows a remote attacker to cause a denial of service via the editorUpdateRow function in kilo.c.

Previous 1...555657...166 Next