← Back
CWE-190

3,872 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

JSON object

Loading...

CVEs (3,872)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
5Canonical
DebianFedoraproject+2 more
5Android
Debian LinuxFedora+2 more
Jun 17, 2026
Sep 27, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interac...Show more
In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112537774Show less
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In MPEG4Extractor, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the media extractor with no additional execution privileges needed. User interaction is n...Show more
In MPEG4Extractor, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111792351Show less
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploi...Show more
In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113572342Show less
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In libmediaextractor there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitatio...Show more
In libmediaextractor there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111921829Show less
1Linecorp
1Line
Jun 17, 2026
Sep 19, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Integer overflow vulnerability in LINE(Android) from 4.4.0 to the version before 9.15.1 allows remote attackers to cause a denial of service (DoS) condition or execute arbitrary code via a specially crafted image.
1Linecorp
1Apng Drawable
Jun 17, 2026
Sep 12, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Integer overflow vulnerability in apng-drawable 1.0.0 to 1.6.0 allows an attacker to cause a denial of service (DoS) condition or execute arbitrary code via unspecified vectors.
5Canonical
DebianFedoraproject+2 more
5Debian Linux
FedoraLeap+2 more
Jun 17, 2026
Sep 9, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
sysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in sa_common.c.
1Kilo Project
1Kilo
Jun 17, 2026
Sep 8, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Kilo 0.0.1 has a heap-based buffer overflow because there is an integer overflow in a calculation involving the number of tabs in one row.
1Google
1Android
Jun 17, 2026
Sep 5, 2019
N/A· v4
7.8 HIGH· v3
6.9 MEDIUM· v2
In binder_transaction of binder.c in the Android kernel, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed...Show more
In binder_transaction of binder.c in the Android kernel, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Show less
1Google
1Android
Jun 17, 2026
Sep 5, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In NDEF_MsgValidate of ndef_utils in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution p...Show more
In NDEF_MsgValidate of ndef_utils in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Show less
1Freedesktop
1Poppler
Nov 21, 2024
Sep 5, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.
1Canonical
1Ubuntu Linux
Jun 17, 2026
Aug 29, 2019
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
An integer overflow in whoopsie before versions 0.2.52.5ubuntu0.1, 0.2.62ubuntu0.1, 0.2.64ubuntu0.1, 0.2.66, results in an out-of-bounds write to a heap allocated buffer when processing large crash dumps. This results in...Show more
An integer overflow in whoopsie before versions 0.2.52.5ubuntu0.1, 0.2.62ubuntu0.1, 0.2.64ubuntu0.1, 0.2.66, results in an out-of-bounds write to a heap allocated buffer when processing large crash dumps. This results in a crash or possible code-execution in the context of the whoopsie process.Show less
1Nvidia
1Clara Genomics Analysis
Jun 17, 2026
Aug 29, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Clara Genomics Analysis before 0.2.0 has an integer overflow for cudapoa memory management in allocate_block.cpp.
1Libzetta Rs Project
1Libzetta Rs
Jun 17, 2026
Aug 29, 2019
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
libZetta.rs through 0.1.2 has an integer overflow in the zpool parser (for error stats) that leads to a panic.
1Lexmark
716500e Firmware
C734 FirmwareC736 Firmware+68 more
Jun 17, 2026
Aug 28, 2019
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Various Lexmark products have an Integer Overflow.
1Suricata Ids
1Suricata
Jun 17, 2026
Aug 28, 2019
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
An issue was discovered in Suricata 4.1.3. The function ftp_pasv_response lacks a check for the length of part1 and part2, leading to a crash within the ftp/mod.rs file.
1Adobe
2Acrobat Dc
Acrobat Reader Dc
Jun 17, 2026
Aug 20, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an integer...Show more
Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an integer overflow vulnerability. Successful exploitation could lead to information disclosure.Show less
1Adobe
2Acrobat Dc
Acrobat Reader Dc
Jun 17, 2026
Aug 20, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an integer...Show more
Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an integer overflow vulnerability. Successful exploitation could lead to information disclosure.Show less
2Google
Openweave
2Nest Cam Iq Indoor Firmware
Openweave Core
Jun 17, 2026
Aug 20, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An exploitable information disclosure vulnerability exists in the Weave MessageLayer parsing of Openweave-core version 4.0.2 and Nest Cam IQ Indoor version 4620002. A specially crafted weave packet can cause an integer o...Show more
An exploitable information disclosure vulnerability exists in the Weave MessageLayer parsing of Openweave-core version 4.0.2 and Nest Cam IQ Indoor version 4620002. A specially crafted weave packet can cause an integer overflow to occur, resulting in PacketBuffer data reuse. An attacker can send a packet to trigger this vulnerability.Show less
1Google
1Nest Cam Iq Indoor Firmware
Jun 17, 2026
Aug 20, 2019
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
An exploitable denial-of-service vulnerability exists in the Weave certificate loading functionality of Nest Cam IQ Indoor camera, version 4620002. A specially crafted weave packet can cause an integer overflow and an ou...Show more
An exploitable denial-of-service vulnerability exists in the Weave certificate loading functionality of Nest Cam IQ Indoor camera, version 4620002. A specially crafted weave packet can cause an integer overflow and an out-of-bounds read on unmapped memory to occur, resulting in a denial of service. An attacker can send a specially crafted packet to trigger.Show less