Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

CVEs (3,299)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2011-4097 2Linux Redhat 2Enterprise Linux Linux Kernel Apr 29, 2026 May 17, 2012 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 Integer overflow in the oom_badness function in mm/oom_kill.c in the Linux kernel before 3.1.8 on 64-bit platforms allows local users to cause a denial of service (memory consumption or process termination) by using a ce...Show more Integer overflow in the oom_badness function in mm/oom_kill.c in the Linux kernel before 3.1.8 on 64-bit platforms allows local users to cause a denial of service (memory consumption or process termination) by using a certain large amount of memory.Show less
CVE-2011-3065 1Google 1Chrome Apr 29, 2026 Mar 30, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Skia, as used in Google Chrome before 18.0.1025.142, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
CVE-2011-3045 6Debian FedoraprojectGoogle+3 more 13Chrome Debian LinuxEnterprise Linux+10 more Apr 29, 2026 Mar 22, 2012 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (appl...Show more Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.Show less
CVE-2011-3026 4Apple GoogleOpensuse+1 more 7Chrome Iphone OsLinux Enterprise Server+4 more Apr 29, 2026 Feb 16, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncati...Show more Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation.Show less
CVE-2011-3015 1Google 1Chrome Apr 29, 2026 Feb 16, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVE-2011-4374 1Adobe 2Acrobat Reader Apr 29, 2026 Jan 19, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2013 1Microsoft 3Windows 7 Windows Server 2008Windows Vista Apr 29, 2026 Nov 8, 2011 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code by sending a sequence of...Show more Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code by sending a sequence of crafted UDP packets to a closed port, aka "Reference Counter Overflow Vulnerability."Show less
CVE-2011-2829 1Google 1Chrome Apr 29, 2026 Aug 29, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 Integer overflow in Google Chrome before 13.0.782.215 on 32-bit platforms allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving uniform arrays.
CVE-2011-0211 1Apple 2Mac Os X Quicktime Apr 29, 2026 Jun 24, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.
CVE-2011-0209 1Apple 2Mac Os X Quicktime Apr 29, 2026 Jun 24, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted RIFF WAV file.
CVE-2011-1823 1Google 1Android Apr 21, 2026 Jun 9, 2011 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative in...Show more The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak.Show less
CVE-2011-1178 1Gimp 1Gimp Apr 29, 2026 Jun 6, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple integer overflows in the load_image function in file-pcx.c in the Personal Computer Exchange (PCX) plugin in GIMP 2.6.x and earlier allow remote attackers to cause a denial of service (application crash) or poss...Show more Multiple integer overflows in the load_image function in file-pcx.c in the Personal Computer Exchange (PCX) plugin in GIMP 2.6.x and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PCX image that triggers a heap-based buffer overflow.Show less
CVE-2011-1800 1Google 1Chrome Apr 29, 2026 May 16, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple integer overflows in the SVG Filters implementation in WebCore in WebKit in Google Chrome before 11.0.696.68 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unkn...Show more Multiple integer overflows in the SVG Filters implementation in WebCore in WebKit in Google Chrome before 11.0.696.68 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.Show less
CVE-2011-1745 2Linux Redhat 7Enterprise Linux Enterprise Linux AusEnterprise Linux Desktop+4 more Apr 29, 2026 May 9, 2011 N/A· v4 N/A· v3 6.9 MEDIUM· v2 Integer overflow in the agp_generic_insert_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allows local users to gain privileges or cause a denial of service (system crash) via a crafted...Show more Integer overflow in the agp_generic_insert_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allows local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_BIND agp_ioctl ioctl call.Show less
CVE-2011-1437 1Google 1Chrome Apr 29, 2026 May 3, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple integer overflows in Google Chrome before 11.0.696.57 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to float rendering.
CVE-2011-1593 3Canonical LinuxRedhat 8Enterprise Linux Enterprise Linux AusEnterprise Linux Desktop+5 more Apr 29, 2026 May 3, 2011 N/A· v4 N/A· v3 4.9 MEDIUM· v2 Multiple integer overflows in the next_pidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service (system crash) via a crafted (1) getdents or (2) readdir system ca...Show more Multiple integer overflows in the next_pidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service (system crash) via a crafted (1) getdents or (2) readdir system call.Show less
CVE-2011-0663 1Microsoft 2Jscript Vbscript Apr 29, 2026 Apr 13, 2011 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attackers to execute arbitrary code via a crafted web page, aka "Scripting Memory Re...Show more Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attackers to execute arbitrary code via a crafted web page, aka "Scripting Memory Reallocation Vulnerability."Show less
CVE-2011-1121 2Apple Google 4Chrome Iphone OsItunes+1 more Apr 29, 2026 Mar 1, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 Integer overflow in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a TEXTAREA element.
CVE-2010-4649 2Linux Redhat 6Enterprise Linux Desktop Enterprise Linux EusEnterprise Linux Server+3 more Apr 29, 2026 Feb 18, 2011 N/A· v4 N/A· v3 6.9 MEDIUM· v2 Integer overflow in the ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service (memory corruption) or possibly have unspecifie...Show more Integer overflow in the ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large value of a certain structure member.Show less
CVE-2010-3865 3Linux OpensuseSuse 4Linux Enterprise High Availability Extension Linux Enterprise Real TimeLinux Kernel+1 more Apr 29, 2026 Jan 11, 2011 N/A· v4 N/A· v3 7.2 HIGH· v2 Integer overflow in the rds_rdma_pages function in net/rds/rdma.c in the Linux kernel allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted iovec struct in a Reliable D...Show more Integer overflow in the rds_rdma_pages function in net/rds/rdma.c in the Linux kernel allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted iovec struct in a Reliable Datagram Sockets (RDS) request, which triggers a buffer overflow.Show less

Previous 1...161162163 164 165 Next