Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

CVEs (3,299)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-9821 1Libav 1Libav May 13, 2026 Mar 1, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Integer overflow in libavcodec/mpegvideo_parser.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file.
CVE-2016-10093 1Libtiff 1Libtiff May 13, 2026 Mar 1, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Integer overflow in tools/tiffcp.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5 and 4.0.6 allows remote attac...Show more Integer overflow in tools/tiffcp.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5 and 4.0.6 allows remote attackers to have unspecified impact via a crafted image, which triggers a heap-based buffer overflow.Show less
CVE-2017-5885 2Fedoraproject Gnome 2Fedora Gtk Vnc May 13, 2026 Feb 28, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc before 0.7.0 allow remote servers to cause a denial of service (crash) or possibly execute arbitrary code...Show more Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc before 0.7.0 allow remote servers to cause a denial of service (crash) or possibly execute arbitrary code via vectors involving SetColorMapEntries, which triggers a buffer overflow.Show less
CVE-2016-9558 1Libdwarf Project 1Libdwarf May 13, 2026 Feb 28, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 (1) libdwarf/dwarf_leb.c and (2) dwarfdump/print_frames.c in libdwarf before 20161124 allow remote attackers to have unspecified impact via a crafted bit pattern in a signed leb number, aka a "negation overflow."
CVE-2016-8389 1Iceni 1Argus May 13, 2026 Feb 28, 2017 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 An exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will attempt to convert each character from a font into a polygon and then attempt to raster...Show more An exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will attempt to convert each character from a font into a polygon and then attempt to rasterize these shapes. As the application attempts to iterate through the rows and initializing the polygon shape in the buffer, it will write outside of the bounds of said buffer. This can lead to code execution under the context of the account running it.Show less
CVE-2017-6350 1Vim 1Vim May 13, 2026 Feb 27, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to re...Show more An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.Show less
CVE-2017-6349 1Vim 1Vim May 13, 2026 Feb 27, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resulta...Show more An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.Show less
CVE-2016-4490 1Gnu 1Libiberty May 13, 2026 Feb 24, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to inconsistent use of the long and int types for lengths.
CVE-2016-4489 1Gnu 1Libiberty May 13, 2026 Feb 24, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Integer overflow in the gnu_special function in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to the "demangling of virtual tables."
CVE-2016-2226 1Gnu 1Libiberty May 13, 2026 Feb 24, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow.
CVE-2017-6308 2Debian Tnef Project 2Debian Linux Tnef May 13, 2026 Feb 24, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in tnef before 1.4.13. Several Integer Overflows, which can lead to Heap Overflows, have been identified in the functions that wrap memory allocation.
CVE-2017-6303 2Debian Ytnef Project 2Debian Linux Ytnef May 13, 2026 Feb 24, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "6 of 9. Invalid Write and Integer Overflow."
CVE-2017-6302 2Debian Ytnef Project 2Debian Linux Ytnef May 13, 2026 Feb 24, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "5 of 9. Integer Overflow."
CVE-2016-8636 1Linux 1Linux Kernel May 13, 2026 Feb 22, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.10 allows local users to cause a denial of service (memory corruption), obtain sensitive information f...Show more Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.10 allows local users to cause a denial of service (memory corruption), obtain sensitive information from kernel memory, or possibly have unspecified other impact via a write or read request involving the "RDMA protocol over infiniband" (aka Soft RoCE) technology.Show less
CVE-2016-7511 1Libdwarf Project 1Libdwarf May 13, 2026 Feb 17, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Integer overflow in the dwarf_die_deliv.c in libdwarf 20160613 allows remote attackers to cause a denial of service (crash) via a crafted file.
CVE-2016-6872 1Facebook 1Hhvm May 13, 2026 Feb 17, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Integer overflow in StringUtil::implode in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors.
CVE-2016-6871 1Facebook 1Hhvm May 13, 2026 Feb 17, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Integer overflow in bcmath in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors, which triggers a buffer overflow.
CVE-2016-6252 1Shadow Project 1Shadow May 13, 2026 Feb 17, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.
CVE-2017-0309 1Nvidia 1Gpu Driver May 13, 2026 Feb 15, 2017 N/A· v4 8.8 HIGH· v3 7.2 HIGH· v2 All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where multiple integer overflows may cause improper memory allocation leading to a denial of service or potential escalat...Show more All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where multiple integer overflows may cause improper memory allocation leading to a denial of service or potential escalation of privileges.Show less
CVE-2016-1889 1Freebsd 1Freebsd May 13, 2026 Feb 15, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Integer overflow in the bhyve hypervisor in FreeBSD 10.1, 10.2, 10.3, and 11.0 when configured with a large amount of guest memory, allows local users to gain privilege via a crafted device descriptor.

Previous 1...152153154...165 Next