Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

CVEs (3,299)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-15831 1Google 1Android Nov 21, 2024 Mar 16, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function wma_ndp_end_indication_event_handler(), there is no input validation check on a event_info v...Show more In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function wma_ndp_end_indication_event_handler(), there is no input validation check on a event_info value coming from firmware, which can cause an integer overflow and then leads to potential heap overwrite.Show less
CVE-2017-14887 1Google 1Android Nov 21, 2024 Mar 16, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the processing of messages of type eWNI_SME_MODIFY_ADDITIONAL_IES, an integer overflow leading to heap bu...Show more In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the processing of messages of type eWNI_SME_MODIFY_ADDITIONAL_IES, an integer overflow leading to heap buffer overflow may potentially occur.Show less
CVE-2016-10393 1Google 1Android Nov 21, 2024 Mar 15, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when processing a clip with large size values, integer arithmetic overflows, and allocated buffer size will...Show more In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when processing a clip with large size values, integer arithmetic overflows, and allocated buffer size will be less than intended buffer size. The following buffer operations will overflow the allocated buffer.Show less
CVE-2017-18233 3Canonical DebianExempi Project 3Debian Linux ExempiUbuntu Linux Nov 21, 2024 Mar 15, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp allows remote attackers to cause a denial of service (infinite loop) via crafted XMP data in a...Show more An issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp allows remote attackers to cause a denial of service (infinite loop) via crafted XMP data in a .avi file.Show less
CVE-2018-8098 2Debian Libgit2 2Debian Linux Libgit2 Jun 17, 2026 Mar 14, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Integer overflow in the index.c:read_entry() function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an attacker to cause a denial of service (out-of-bounds read) via a crafted repository...Show more Integer overflow in the index.c:read_entry() function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an attacker to cause a denial of service (out-of-bounds read) via a crafted repository index file.Show less
CVE-2018-1000127 4Canonical DebianMemcached+1 more 4Debian Linux MemcachedOpenstack+1 more Nov 21, 2024 Mar 13, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 memcached version prior to 1.4.37 contains an Integer Overflow vulnerability in items.c:item_free() that can result in data corruption and deadlocks due to items existing in hash table being reused from free list. This a...Show more memcached version prior to 1.4.37 contains an Integer Overflow vulnerability in items.c:item_free() that can result in data corruption and deadlocks due to items existing in hash table being reused from free list. This attack appear to be exploitable via network connectivity to the memcached service. This vulnerability appears to have been fixed in 1.4.37 and later.Show less
CVE-2018-1000098 2Debian Teluu 2Debian Linux Pjsip Nov 21, 2024 Mar 13, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Teluu PJSIP version 2.7.1 and earlier contains a Integer Overflow vulnerability in pjmedia SDP parsing that can result in Crash. This attack appear to be exploitable via Sending a specially crafted message. This vulnerab...Show more Teluu PJSIP version 2.7.1 and earlier contains a Integer Overflow vulnerability in pjmedia SDP parsing that can result in Crash. This attack appear to be exploitable via Sending a specially crafted message. This vulnerability appears to have been fixed in 2.7.2.Show less
CVE-2017-17328 1Huawei 1Mha Al00a Firmware Nov 21, 2024 Mar 9, 2018 N/A· v4 5.5 MEDIUM· v3 7.1 HIGH· v2 Huawei smartphones with software of MHA-AL00AC00B125 have an integer overflow vulnerability. The software does not process certain variable properly when handle certain process. An attacker tricks the user who has root p...Show more Huawei smartphones with software of MHA-AL00AC00B125 have an integer overflow vulnerability. The software does not process certain variable properly when handle certain process. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could cause information disclosure.Show less
CVE-2017-17324 1Huawei 1Mate 9 Pro Firmware Nov 21, 2024 Mar 9, 2018 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Huawei Mate 9 Pro smartphones with software LON-AL00BC00B139D; LON-AL00BC00B229 have an integer overflow vulnerability. The camera driver does not validate the external input parameters and causes an integer overflow, wh...Show more Huawei Mate 9 Pro smartphones with software LON-AL00BC00B139D; LON-AL00BC00B229 have an integer overflow vulnerability. The camera driver does not validate the external input parameters and causes an integer overflow, which in the after processing results in a buffer overflow. An attacker tricks the user to install a crafted application, successful exploit could cause malicious code execution.Show less
CVE-2017-17147 1Huawei 1Dp300 Firmware Nov 21, 2024 Mar 9, 2018 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 Huawei DP300 V500R002C00 have an integer overflow vulnerability due to the lack of validation. An authenticated local attacker can craft specific XML files to the affected products and parse this file, which result in Do...Show more Huawei DP300 V500R002C00 have an integer overflow vulnerability due to the lack of validation. An authenticated local attacker can craft specific XML files to the affected products and parse this file, which result in DoS attacks.Show less
CVE-2014-5044 1Gnu 1Libgfortran Nov 21, 2024 Mar 7, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of service (Fortran application crash) via vectors related to array allocation.
CVE-2018-7643 2Gnu Redhat 4Binutils Enterprise Linux DesktopEnterprise Linux Server+1 more Jun 17, 2026 Mar 2, 2018 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The display_debug_ranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact via a crafted ELF...Show more The display_debug_ranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, as demonstrated by objdump.Show less
CVE-2018-7569 2Gnu Redhat 4Binutils Enterprise Linux DesktopEnterprise Linux Server+1 more Jun 17, 2026 Feb 28, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer underflow or overflow, and application crash) via an E...Show more dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer underflow or overflow, and application crash) via an ELF file with a corrupt DWARF FORM block, as demonstrated by nm.Show less
CVE-2018-7568 2Gnu Redhat 4Binutils Enterprise Linux DesktopEnterprise Linux Server+1 more Jun 17, 2026 Feb 28, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The parse_die function in dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer overflow and application cra...Show more The parse_die function in dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer overflow and application crash) via an ELF file with corrupt dwarf1 debug information, as demonstrated by nm.Show less
CVE-2018-7471 1Bj Tct 1Kingview Jun 17, 2026 Feb 25, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 KingView 7.5SP1 has an integer overflow during stgopenstorage API read operations.
CVE-2017-17765 1Google 1Android Nov 21, 2024 Feb 23, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In all Qualcomm products with Android releases from CAF using the Linux kernel, multiple values received from firmware are not properly validated in wma_get_ll_stats_ext_buf() and are used to allocate the sizes of buffer...Show more In all Qualcomm products with Android releases from CAF using the Linux kernel, multiple values received from firmware are not properly validated in wma_get_ll_stats_ext_buf() and are used to allocate the sizes of buffers and may be vulnerable to integer overflow leading to buffer overflow.Show less
CVE-2017-17764 1Google 1Android Nov 21, 2024 Feb 23, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In all Qualcomm products with Android releases from CAF using the Linux kernel, the num_failure_info value from firmware is not properly validated in wma_rx_aggr_failure_event_handler() so that an integer overflow vulner...Show more In all Qualcomm products with Android releases from CAF using the Linux kernel, the num_failure_info value from firmware is not properly validated in wma_rx_aggr_failure_event_handler() so that an integer overflow vulnerability in a buffer size calculation may potentially lead to a buffer overflow.Show less
CVE-2017-15862 1Google 1Android Nov 21, 2024 Feb 23, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In all Qualcomm products with Android releases from CAF using the Linux kernel, in wma_unified_link_radio_stats_event_handler(), the number of radio channels coming from firmware is not properly validated, potentially le...Show more In all Qualcomm products with Android releases from CAF using the Linux kernel, in wma_unified_link_radio_stats_event_handler(), the number of radio channels coming from firmware is not properly validated, potentially leading to an integer overflow vulnerability followed by a buffer overflow.Show less
CVE-2018-7226 1Vncterm Project 1Vncterm Jun 17, 2026 Feb 19, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in vcSetXCutTextProc() in VNConsole.c in LinuxVNC and VNCommand from the LibVNC/vncterm distribution through 0.9.10. Missing sanitization of the client-specified message length may cause integer o...Show more An issue was discovered in vcSetXCutTextProc() in VNConsole.c in LinuxVNC and VNCommand from the LibVNC/vncterm distribution through 0.9.10. Missing sanitization of the client-specified message length may cause integer overflow or possibly have unspecified other impact via a specially crafted VNC packet.Show less
CVE-2018-7225 4Canonical DebianLibvncserver Project+1 more 9Debian Linux Enterprise Linux DesktopEnterprise Linux Server+6 more Jun 17, 2026 Feb 19, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspe...Show more An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.Show less

Previous 1...141142143...165 Next