Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

CVEs (3,306)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-47454 1Google 1Android Jun 17, 2026 Mar 10, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
CVE-2022-40530 1Qualcomm 189Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+186 more Jun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.
CVE-2022-25705 1Qualcomm 201Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+198 more Jun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
CVE-2023-22436 1Openatom 1Openharmony Jun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 The kernel subsystem function check_permission_for_set_tokenid within OpenHarmony-v3.1.5 and prior versions has an UAF vulnerability which local attackers can exploit this vulnerability to escalate the privilege to roo...Show more The kernel subsystem function check_permission_for_set_tokenid within OpenHarmony-v3.1.5 and prior versions has an UAF vulnerability which local attackers can exploit this vulnerability to escalate the privilege to root. Show less
CVE-2023-25155 1Redis 1Redis Jun 17, 2026 Mar 2, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted `SRANDMEMBER`, `ZRANDMEMBER`, and `HRANDFIELD` commands can trigger an integer overflow, resulting in a runtime assertio...Show more Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted `SRANDMEMBER`, `ZRANDMEMBER`, and `HRANDFIELD` commands can trigger an integer overflow, resulting in a runtime assertion and termination of the Redis server process. This problem affects all Redis versions. Patches were released in Redis version(s) 6.0.18, 6.2.11 and 7.0.9.Show less
CVE-2021-4327 1Serenityos 1Serenityos Jun 17, 2026 Mar 1, 2023 N/A· v4 9.8 CRITICAL· v3 5.2 MEDIUM· v2 A vulnerability was found in SerenityOS. It has been rated as critical. Affected by this issue is the function initialize_typed_array_from_array_buffer in the library Userland/Libraries/LibJS/Runtime/TypedArray.cpp. The...Show more A vulnerability was found in SerenityOS. It has been rated as critical. Affected by this issue is the function initialize_typed_array_from_array_buffer in the library Userland/Libraries/LibJS/Runtime/TypedArray.cpp. The manipulation leads to integer overflow. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The patch is identified as f6c6047e49f1517778f5565681fb64750b14bf60. It is recommended to apply a patch to fix this issue. VDB-222074 is the identifier assigned to this vulnerability.Show less
CVE-2023-0754 3Ge PtcRockwellautomation 9Digital Industrial Gateway Server Kepserver EnterpriseKepware Server+6 more Jun 17, 2026 Feb 23, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute arbitrary code.
CVE-2023-0933 1Google 1Chrome Jun 17, 2026 Feb 22, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Integer overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)
CVE-2023-26242 1Linux 1Linux Kernel Jun 17, 2026 Feb 21, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 afu_mmio_region_get_by_offset in drivers/fpga/dfl-afu-region.c in the Linux kernel through 6.1.12 has an integer overflow.
CVE-2022-34843 1Intel 1Trace Analyzer And Collector Jun 17, 2026 Feb 16, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Integer overflow in the Intel(R) Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2023-23462 1Libpeconv Project 1Libpeconv Jun 17, 2026 Feb 15, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Libpeconv – integer overflow, before commit 75b1565 (30/11/2022).
CVE-2023-21823 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Feb 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Graphics Component Remote Code Execution Vulnerability
CVE-2023-21803 1Microsoft 7Windows 10 Windows 10 1607Windows 10 1809+4 more Jun 17, 2026 Feb 14, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Windows iSCSI Discovery Service Remote Code Execution Vulnerability
CVE-2023-21802 1Microsoft 13Windows 10 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Feb 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Media Remote Code Execution Vulnerability
CVE-2023-21797 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Feb 14, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2023-21716 1Microsoft 8Office Office Long Term Servicing ChannelOffice Online Server+5 more Jun 17, 2026 Feb 14, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Microsoft Word Remote Code Execution Vulnerability
CVE-2023-21704 1Microsoft 1Sql Server Jun 17, 2026 Feb 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2023-21686 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Feb 14, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2022-47451 1Google 1Android Jun 17, 2026 Feb 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
CVE-2022-47322 1Google 1Android Jun 17, 2026 Feb 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

Previous 1...606162...166 Next