Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

CVEs (3,306)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-20107 2Google Linux 2Android Linux Kernel Jun 17, 2026 May 3, 2022 N/A· v4 4.4 MEDIUM· v3 4.9 MEDIUM· v2 In subtitle service, there is a possible application crash due to an integer overflow. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation....Show more In subtitle service, there is a possible application crash due to an integer overflow. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03330673; Issue ID: DTV03330673.Show less
CVE-2021-27439 1Tencent 1Tencentos Tiny Jun 17, 2026 May 3, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 TencentOS-tiny version 3.1.0 is vulnerable to integer wrap-around in function 'tos_mmheap_alloc incorrect calculation of effective memory allocation size. This improper memory assignment can lead to arbitrary memory allo...Show more TencentOS-tiny version 3.1.0 is vulnerable to integer wrap-around in function 'tos_mmheap_alloc incorrect calculation of effective memory allocation size. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.Show less
CVE-2021-27435 1Arm 1Mbed Jun 17, 2026 May 3, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 ARM mbed product Version 6.3.0 is vulnerable to integer wrap-around in malloc_wrapper function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/e...Show more ARM mbed product Version 6.3.0 is vulnerable to integer wrap-around in malloc_wrapper function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.Show less
CVE-2021-27433 1Arm 1Mbed Ualloc Jun 17, 2026 May 3, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 ARM mbed-ualloc memory library version 1.3.0 is vulnerable to integer wrap-around in function mbed_krbs, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code in...Show more ARM mbed-ualloc memory library version 1.3.0 is vulnerable to integer wrap-around in function mbed_krbs, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.Show less
CVE-2021-27431 1Arm 1Cmsis Rtos Jun 17, 2026 May 3, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 ARM CMSIS RTOS2 versions prior to 2.1.3 are vulnerable to integer wrap-around inosRtxMemoryAlloc (local malloc equivalent) function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as...Show more ARM CMSIS RTOS2 versions prior to 2.1.3 are vulnerable to integer wrap-around inosRtxMemoryAlloc (local malloc equivalent) function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or injected code execution.Show less
CVE-2021-27427 1Riot Os 1Riot Jun 17, 2026 May 3, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code in...Show more RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.Show less
CVE-2021-27425 1Cesanta 1Mongoose Os Jun 17, 2026 May 3, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Cesanta Software Mongoose-OS v2.17.0 is vulnerable to integer wrap-around in function mm_malloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash o...Show more Cesanta Software Mongoose-OS v2.17.0 is vulnerable to integer wrap-around in function mm_malloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.Show less
CVE-2021-27421 1Nxp 1Mcuxpresso Software Development Kit Jun 17, 2026 May 3, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDK_Malloc function, which could allow to access memory locations outside the bounds of a specified array, leading to unexpected behavior s...Show more NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDK_Malloc function, which could allow to access memory locations outside the bounds of a specified array, leading to unexpected behavior such segmentation fault when assigning a particular block of memory from the heap via malloc.Show less
CVE-2021-27419 1Uclibc Ng Project 1Uclibc Ng Jun 17, 2026 May 3, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 uClibc-ng versions prior to 1.0.37 are vulnerable to integer wrap-around in functions malloc-simple. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a cra...Show more uClibc-ng versions prior to 1.0.37 are vulnerable to integer wrap-around in functions malloc-simple. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.Show less
CVE-2021-27417 1Ecoscentric 1Ecospro Jun 17, 2026 May 3, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 eCosCentric eCosPro RTOS Versions 2.0.1 through 4.5.3 are vulnerable to integer wraparound in function calloc (an implementation of malloc). The unverified memory assignment can lead to arbitrary memory allocation, resul...Show more eCosCentric eCosPro RTOS Versions 2.0.1 through 4.5.3 are vulnerable to integer wraparound in function calloc (an implementation of malloc). The unverified memory assignment can lead to arbitrary memory allocation, resulting in a heap-based buffer overflow.Show less
CVE-2021-27411 1Silabs 1Micrium Os Jun 17, 2026 May 3, 2022 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 Micrium OS Versions 5.10.1 and prior are vulnerable to integer wrap-around in functions Mem_DynPoolCreate, Mem_DynPoolCreateHW and Mem_PoolCreate. This unverified memory assignment can lead to arbitrary memory allocation...Show more Micrium OS Versions 5.10.1 and prior are vulnerable to integer wrap-around in functions Mem_DynPoolCreate, Mem_DynPoolCreateHW and Mem_PoolCreate. This unverified memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as very small blocks of memory being allocated instead of very large ones.Show less
CVE-2021-22680 1Nxp 1Mqx Jun 17, 2026 May 3, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 NXP MQX Versions 5.1 and prior are vulnerable to integer overflow in mem_alloc, _lwmem_alloc and _partition functions. This unverified memory assignment can lead to arbitrary memory allocation, resulting in unexpected be...Show more NXP MQX Versions 5.1 and prior are vulnerable to integer overflow in mem_alloc, _lwmem_alloc and _partition functions. This unverified memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.Show less
CVE-2021-22556 1Google 1Fuchsia Jun 17, 2026 May 3, 2022 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 The Security Team discovered an integer overflow bug that allows an attacker with code execution to issue memory cache invalidation operations on pages that they don’t own, allowing them to control kernel memory from use...Show more The Security Team discovered an integer overflow bug that allows an attacker with code execution to issue memory cache invalidation operations on pages that they don’t own, allowing them to control kernel memory from userspace. We recommend upgrading to kernel version 4.1 or beyond.Show less
CVE-2022-29824 5Debian FedoraprojectNetapp+2 more 19Active Iq Unified Manager Clustered Data OntapClustered Data Ontap Antivirus Connector+16 more Jun 17, 2026 May 3, 2022 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf) and tree.c (xmlBuffer) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to...Show more In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf) and tree.c (xmlBuffer) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.Show less
CVE-2022-1475 1Ffmpeg 1Ffmpeg Jun 17, 2026 May 2, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file.
CVE-2021-4206 3Debian QemuRedhat 3Debian Linux Enterprise LinuxQemu Jun 17, 2026 Apr 29, 2022 N/A· v4 8.2 HIGH· v3 4.6 MEDIUM· v2 A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc() function can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. Th...Show more A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc() function can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. This flaw allows a malicious privileged guest user to crash the QEMU process on the host or potentially execute arbitrary code within the context of the QEMU process.Show less
CVE-2022-28197 1Nvidia 1Jetson Linux Jun 17, 2026 Apr 27, 2022 N/A· v4 5.0 MEDIUM· v3 4.4 MEDIUM· v2 NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_mount function, where Insufficient validation of untrusted data may allow a highly privileged local attacker to cause an integer overflow. Thi...Show more NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_mount function, where Insufficient validation of untrusted data may allow a highly privileged local attacker to cause an integer overflow. This difficult-to-exploit vulnerability may lead to code execution, escalation of privileges, limited denial of service, and some impact to confidentiality and integrity. The scope of impact can extend to other components.Show less
CVE-2022-28195 1Nvidia 1Jetson Linux Jun 17, 2026 Apr 27, 2022 N/A· v4 5.7 MEDIUM· v3 4.6 MEDIUM· v2 NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_read_file function, where insufficient validation of untrusted data may allow a highly privileged local attacker to cause a integer overflow,...Show more NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_read_file function, where insufficient validation of untrusted data may allow a highly privileged local attacker to cause a integer overflow, which may lead to code execution, escalation of privileges, limited denial of service, and some impact to confidentiality and integrity. The scope of impact can extend to other components.Show less
CVE-2021-3624 2Dcraw Project Debian 2Dcraw Debian Linux Jun 17, 2026 Apr 18, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be executed in the victim's system.
CVE-2020-6099 1Graphisoft 1Bimx Desktop Viewer Jun 17, 2026 Apr 18, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An exploitable code execution vulnerability exists in the file format parsing functionality of Graphisoft BIMx Desktop Viewer 2019.2.2328. A specially crafted file can cause a heap buffer overflow resulting in a code exe...Show more An exploitable code execution vulnerability exists in the file format parsing functionality of Graphisoft BIMx Desktop Viewer 2019.2.2328. A specially crafted file can cause a heap buffer overflow resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less

Previous 1...697071...166 Next