← Back
CWE-190

3,873 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

JSON object

Loading...

CVEs (3,873)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
6Canonical
DebianOracle+3 more
6Debian Linux
LinuxLinux+3 more
Nov 21, 2024
Oct 9, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used.
4Canonical
DebianQemu+1 more
5Debian Linux
QemuUbuntu Linux+2 more
Apr 28, 2026
Oct 9, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Qemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer data type is used.
1Rust Lang
1Rust
Nov 21, 2024
Oct 8, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in standard library that can result...Show more
The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in standard library that can result in buffer overflow. This attack appear to be exploitable via str::repeat, passed a large number, can overflow an internal buffer. This vulnerability appears to have been fixed in 1.29.1.Show less
1Google
1Android
Jun 17, 2026
Oct 2, 2018
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
In SkSampler::Fill of SkSampler.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed...Show more
In SkSampler::Fill of SkSampler.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-78354855Show less
1Google
1Android
Jun 17, 2026
Oct 2, 2018
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
In AMediaCodecCryptoInfo_new of NdkMediaCodec.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution in external apps with no additional execution privileges nee...Show more
In AMediaCodecCryptoInfo_new of NdkMediaCodec.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution in external apps with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A-111603051Show less
1Google
1Android
Jun 17, 2026
Oct 2, 2018
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
In ihevcd_parse_sei_payload of ihevcd_parse_headers.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User int...Show more
In ihevcd_parse_sei_payload of ihevcd_parse_headers.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0 Android ID: A-65484460Show less
1Viabtc
1Viabtc Exchange Server
Nov 21, 2024
Sep 26, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
utils/ut_ws_svr.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption.
1Viabtc
1Viabtc Exchange Server
Nov 21, 2024
Sep 26, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
network/nw_buf.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption.
1Viabtc
1Viabtc Exchange Server
Nov 21, 2024
Sep 26, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
utils/ut_rpc.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption.
6Canonical
F5Linux+3 more
28Big Ip Access Policy Manager
Big Ip Advanced Firewall ManagerBig Ip Analytics+25 more
Jan 27, 2026
Sep 25, 2018
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on t...Show more
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.Show less
1Polyai Project
1Polyai
Nov 21, 2024
Sep 21, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The mintToken function of a smart contract implementation for PolyAi (AI), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
1Substratum
1Substratum
Nov 21, 2024
Sep 21, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In the mintToken function of a smart contract implementation for Substratum (SUB), an Ethereum ERC20 token, the administrator can control mintedAmount, leverage an integer overflow, and modify a user account's balance ar...Show more
In the mintToken function of a smart contract implementation for Substratum (SUB), an Ethereum ERC20 token, the administrator can control mintedAmount, leverage an integer overflow, and modify a user account's balance arbitrarily.Show less
1Qualcomm
30Mdm9206 Firmware
Mdm9607 FirmwareMdm9640 Firmware+27 more
Nov 21, 2024
Sep 20, 2018
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415,...Show more
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820A, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016, lack of input validation in WLANWMI command handlers can lead to integer & heap overflows.Show less
1Google
1Android
Nov 21, 2024
Sep 19, 2018
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing preferred network offload scan results integer overflow may lead to buffer overflow when large...Show more
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing preferred network offload scan results integer overflow may lead to buffer overflow when large frame length is received from FW.Show less
1Google
1Android
Nov 21, 2024
Sep 19, 2018
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check while calculating the MPDU data length will cause an integer overflow and then to buffer overflow...Show more
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check while calculating the MPDU data length will cause an integer overflow and then to buffer overflow in WLAN function.Show less
1Google
1Android
Nov 21, 2024
Sep 18, 2018
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on integer overflow while calculating memory can lead to Buffer overflow in WLAN ext scan handler.
1Google
1Android
Nov 21, 2024
Sep 18, 2018
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while accessing the keystore in LK, an integer overflow vulnerability exists which may potentially lead to a buf...Show more
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while accessing the keystore in LK, an integer overflow vulnerability exists which may potentially lead to a buffer overflow.Show less
1Google
1Android
Nov 21, 2024
Sep 18, 2018
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while loading a user application in qseecom, an integer overflow could potentially occur if the application part...Show more
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while loading a user application in qseecom, an integer overflow could potentially occur if the application partition size is rounded up to page_size.Show less
1Iceni
1Argus
Nov 21, 2024
Sep 17, 2018
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An exploitable heap overflow vulnerability exists in the ipStringCreate function of Iceni Argus Version 6.6.05. A specially crafted pdf file can cause an integer overflow resulting in heap overflow. An attacker can send...Show more
An exploitable heap overflow vulnerability exists in the ipStringCreate function of Iceni Argus Version 6.6.05. A specially crafted pdf file can cause an integer overflow resulting in heap overflow. An attacker can send file to trigger this vulnerability.Show less
3Canonical
DebianLibtiff
3Debian Linux
LibtiffUbuntu Linux
Nov 21, 2024
Sep 16, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in LibTIFF 4.0.9. There is a int32 overflow in multiply_ms in tools/ppm2tiff.c, which can cause a denial of service (crash) or possibly have unspecified other impact via a crafted image file.