← Back
CWE-190

3,306 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

JSON object

Loading...

CVEs (3,306)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Techsmith
1Mp4v2
Nov 21, 2024
Jul 16, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In MP4v2 2.0.0, there is an integer overflow (with resultant memory corruption) when resizing MP4Array for the ftyp atom in mp4array.h.
3Canonical
ClamavDebian
3Clamav
Debian LinuxUbuntu Linux
Nov 21, 2024
Jul 16, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
ClamAV before 0.100.1 has an HWP integer overflow with a resultant infinite loop via a crafted Hangul Word Processor file. This is in parsehwp3_paragraph() in libclamav/hwp.c.
1Stex White List Project
1Stex White List
Nov 21, 2024
Jul 16, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in a smart contract implementation for STeX White List (STE(WL)), an Ethereum token. The contract has an integer overflow. If the owner sets the value of amount to a large number then the "amount...Show more
An issue was discovered in a smart contract implementation for STeX White List (STE(WL)), an Ethereum token. The contract has an integer overflow. If the owner sets the value of amount to a large number then the "amount * 1000000000000000" will cause an integer overflow in withdrawToFounders().Show less
1Encryptedtoken Project
1Encryptedtoken
Nov 21, 2024
Jul 16, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in a smart contract implementation for EUC (EUC), an Ethereum token. The contract has an integer overflow. If the owner sets the value of buyPrice to a large number in setPrices() then the "msg.va...Show more
An issue was discovered in a smart contract implementation for EUC (EUC), an Ethereum token. The contract has an integer overflow. If the owner sets the value of buyPrice to a large number in setPrices() then the "msg.value * buyPrice" will cause an integer overflow in the fallback function.Show less
1Mytoken Project
1Mytoken
Nov 21, 2024
Jul 16, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in a smart contract implementation for SingaporeCoinOrigin (SCO), an Ethereum token. The contract has an integer overflow. If the owner sets the value of sellPrice to a large number in setPrices()...Show more
An issue was discovered in a smart contract implementation for SingaporeCoinOrigin (SCO), an Ethereum token. The contract has an integer overflow. If the owner sets the value of sellPrice to a large number in setPrices() then the "amount * sellPrice" will cause an integer overflow in sell().Show less
1Myadvancedtoken Project
1Myadvancedtoken
Nov 21, 2024
Jul 16, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in a smart contract implementation for MKCB, an Ethereum token. If the owner sets the value of sellPrice to a large number in setPrices() then the "amount * sellPrice" will cause an integer overfl...Show more
An issue was discovered in a smart contract implementation for MKCB, an Ethereum token. If the owner sets the value of sellPrice to a large number in setPrices() then the "amount * sellPrice" will cause an integer overflow in sell().Show less
1Tracto
1Tracto
Nov 21, 2024
Jul 15, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The increaseApproval function of a smart contract implementation for Tracto (TRCT), an Ethereum ERC20 token, has an integer overflow.
1Ngtoken Project
1Ngtoken
Nov 21, 2024
Jul 12, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An integer overflow vulnerability exists in the function multipleTransfer of Neo Genesis Token (NGT), an Ethereum token smart contract. An attacker could use it to set any user's balance.
1Malaysiancoin Project
1Malaysiancoin
Nov 21, 2024
Jul 12, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An integer overflow vulnerability exists in the function transferAny of Malaysia coins (Xmc), an Ethereum token smart contract. An attacker could use it to set any user's balance.
1Globecoin Project
1Globecoin
Nov 21, 2024
Jul 12, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An integer overflow vulnerability exists in the function transfer_tokens_after_ICO of GlobeCoin (GLB), an Ethereum token smart contract. An attacker could use it to set any user's balance.
1Wmctoken Project
1Wmctoken
Nov 21, 2024
Jul 12, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An integer overflow vulnerability exists in the function batchTransfer of WeMediaChain (WMC), an Ethereum token smart contract. An attacker could use it to set any user's balance.
1Mp3 Coin Project
1Mp3 Coin
Nov 21, 2024
Jul 12, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An integer overflow vulnerability exists in the function distribute of MP3 Coin (MP3), an Ethereum token smart contract. An attacker could use it to set any user's balance.
1Sharktech Project
1Sharktech
Nov 21, 2024
Jul 12, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An integer overflow vulnerability exists in the function batchTransfer of SHARKTECH (SKT), an Ethereum token smart contract. An attacker could use it to set any user's balance.
1Rocket Coin Project
1Rocket Coin
Nov 21, 2024
Jul 12, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An integer overflow vulnerability exists in the function multiTransfer of Rocket Coin (XRC), an Ethereum token smart contract. An attacker could use it to set any user's balance.
2Debian
Libgit2
2Debian Linux
Libgit2
Nov 21, 2024
Jul 10, 2018
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign extension in git_delta_apply function in delta.c file may lead to an integer overflow which in turn leads to an out of bou...Show more
A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign extension in git_delta_apply function in delta.c file may lead to an integer overflow which in turn leads to an out of bound read, allowing to read before the base object. An attacker may use this flaw to leak memory addresses or cause a Denial of Service.Show less
2Adobe
Redhat
5Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Workstation+2 more
Nov 21, 2024
Jul 9, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Adobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability. Successful exploitation could lead to information disclosure.
4Canonical
LibpngOracle+1 more
7Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Workstation+4 more
May 29, 2026
Jul 9, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denia...Show more
In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.Show less
1Jiucaitoken Project
1Jiucaitoken
Nov 21, 2024
Jul 9, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The mintToken function of a smart contract implementation for JiucaiToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
1Entercoin Project
1Entercoin
Nov 21, 2024
Jul 9, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The mintToken function of a smart contract implementation for ENTER (ENTR) (Contract Name: EnterCoin), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary u...Show more
The mintToken function of a smart contract implementation for ENTER (ENTR) (Contract Name: EnterCoin), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.Show less
1Myylctoken Project
1Myylctoken
Nov 21, 2024
Jul 9, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The mintToken function of a smart contract implementation for MyYLC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.