← Back
CWE-190

3,306 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

JSON object

Loading...

CVEs (3,306)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Debian
Nvidia
4Cloud Gaming
Debian LinuxGpu Display Driver+1 more
Jun 17, 2026
Dec 30, 2022
N/A· v4
7.3 HIGH· v3
N/A· v2
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to denial of service, data tampering, or information disclosure.
2Debian
Nvidia
4Cloud Gaming
Debian LinuxGpu Display Driver+1 more
Jun 17, 2026
Dec 30, 2022
N/A· v4
7.3 HIGH· v3
N/A· v2
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to information disclosure, data tampering or denial of service.
1Nvidia
2Cloud Gaming
Virtual Gpu
Jun 17, 2026
Dec 30, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow in index validation may lead to denial of service, information disclosure, or data tampering.
1Nvidia
1Gpu Display Driver
Jun 17, 2026
Dec 30, 2022
N/A· v4
7.3 HIGH· v3
N/A· v2
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, information disclosure, or data tampering.
1Squid Cache
1Squid
Jun 17, 2026
Dec 25, 2022
N/A· v4
8.6 HIGH· v3
N/A· v2
A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In s...Show more
A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7.Show less
3Heimdal Project
MitSamba
3Heimdal
Kerberos 5Samba
Jun 17, 2026
Dec 25, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms...Show more
PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has "a similar bug."Show less
1Mozilla
3Firefox
Firefox EsrThunderbird
Jun 17, 2026
Dec 22, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
In the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have occurred when the number of elements to replace was too large for the container. This vulnerability affects Firefox < 102, F...Show more
In the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have occurred when the number of elements to replace was too large for the container. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11.Show less
2Debian
Gnupg
2Debian Linux
Libksba
Jun 17, 2026
Dec 20, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.
1Google
1Android
Jun 17, 2026
Dec 16, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
In sec_media_protect of media.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege of secure mode MFC Core with no additional execution privileges needed. User interacti...Show more
In sec_media_protect of media.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege of secure mode MFC Core with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242357514References: N/AShow less
1Google
1Android
Jun 17, 2026
Dec 16, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
In ppmpu_set of ppmpu.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...Show more
In ppmpu_set of ppmpu.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243480506References: N/AShow less
1Apple
3Ipados
Iphone OsMacos
Jun 17, 2026
Dec 15, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.
1Radare
1Radare2
Jun 17, 2026
Dec 10, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0.
2Debian
Neutrinolabs
2Debian Linux
Xrdp
Jun 17, 2026
Dec 9, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Integer Overflow in xrdp_mm_process_rail_update_window_text() fun...Show more
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Integer Overflow in xrdp_mm_process_rail_update_window_text() function. There are no known workarounds for this issue. Users are advised to upgrade.Show less
1Google
1Android
Jun 17, 2026
Dec 8, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Integer overflow vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attacker to perform Out-Of-Bounds Write.
2Debian
Videolan
2Debian Linux
Vlc Media Player
Jun 17, 2026
Dec 6, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code u...Show more
An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafted playlist or connecting to a rogue VNC server, to crash VLC or execute code under some conditions.Show less
1Google
1Android
Jun 17, 2026
Dec 6, 2022
N/A· v4
3.3 LOW· v3
N/A· v2
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
1Google
1Android
Jun 17, 2026
Dec 6, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
1Google
1Android
Jun 17, 2026
Dec 6, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
1Google
1Android
Jun 17, 2026
Dec 6, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
4Debian
FedoraprojectLinux+1 more
8Debian Linux
FedoraH300s Firmware+5 more
Jun 17, 2026
Nov 27, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
An issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c has an integer wraparound via L2CAP_CONF_REQ packets.