Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

CVEs (3,802)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-1083 1Microsoft 5Windows 2000 Windows 2003 ServerWindows Server 2008+2 more Apr 23, 2026 Apr 8, 2008 N/A· v4 8.1 HIGH· v3 9.3 HIGH· v2 Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EM...Show more Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF or WMF image file with a malformed header that triggers an integer overflow, aka "GDI Heap Overflow Vulnerability."Show less
CVE-2008-1374 1Apple 1Cups Apr 23, 2026 Apr 4, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Integer overflow in pdftops filter in CUPS in Red Hat Enterprise Linux 3 and 4, when running on 64-bit platforms, allows remote attackers to execute arbitrary code via a crafted PDF file. NOTE: this issue is due to an i...Show more Integer overflow in pdftops filter in CUPS in Red Hat Enterprise Linux 3 and 4, when running on 64-bit platforms, allows remote attackers to execute arbitrary code via a crafted PDF file. NOTE: this issue is due to an incomplete fix for CVE-2004-0888.Show less
CVE-2007-6353 3Canonical DebianExiv2 3Debian Linux Exiv2Ubuntu Linux Apr 23, 2026 Dec 20, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow.
CVE-2007-4965 1Python 1Python Apr 23, 2026 Sep 18, 2007 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents)...Show more Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.Show less
CVE-2007-2834 4Apache CanonicalDebian+1 more 5Debian Linux OpenofficeStaroffice+2 more Apr 23, 2026 Sep 18, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of un...Show more Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.Show less
CVE-2007-2223 1Microsoft 1Xml Core Services Apr 23, 2026 Aug 14, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a (1) TextNode or (2) XMLDOM object, which causes an integer overflow that leads to a...Show more Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a (1) TextNode or (2) XMLDOM object, which causes an integer overflow that leads to a buffer overflow.Show less
CVE-2007-3387 6Apple CanonicalDebian+3 more 6Cups Debian LinuxGpdf+3 more Apr 23, 2026 Jul 30, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might all...Show more Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.Show less
CVE-2006-4519 1Gimp 1Gimp Apr 23, 2026 Jul 10, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5) Sun RAS,...Show more Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5) Sun RAS, (6) XBM, and (7) XWD files.Show less
CVE-2007-2949 2Canonical Gimp 2Gimp Ubuntu Linux Apr 23, 2026 Jul 4, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height valu...Show more Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height value.Show less
CVE-2007-0221 1Microsoft 1Exchange Server Apr 23, 2026 May 8, 2007 N/A· v4 N/A· v3 7.8 HIGH· v2 Integer overflow in the IMAP (IMAP4) support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a denial of service (service hang) via crafted literals in an IMAP command, aka the "IMAP Literal Proces...Show more Integer overflow in the IMAP (IMAP4) support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a denial of service (service hang) via crafted literals in an IMAP command, aka the "IMAP Literal Processing Vulnerability."Show less
CVE-2007-1383 1Php 1Php Apr 23, 2026 Mar 10, 2007 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Integer overflow in the 16 bit variable reference counter in PHP 4 allows context-dependent attackers to execute arbitrary code by overflowing this counter, which causes the same variable to be destroyed twice, a related...Show more Integer overflow in the 16 bit variable reference counter in PHP 4 allows context-dependent attackers to execute arbitrary code by overflowing this counter, which causes the same variable to be destroyed twice, a related issue to CVE-2007-1286.Show less
CVE-2006-5937 1Grisoft 1Avg Antivirus Apr 23, 2026 Nov 16, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple integer overflows in Grisoft AVG Anti-Virus before 7.1.407 allow remote attackers to execute arbitrary code via crafted (1) CAB or (2) RAR archives that trigger a heap-based buffer overflow. NOTE: some of these...Show more Multiple integer overflows in Grisoft AVG Anti-Virus before 7.1.407 allow remote attackers to execute arbitrary code via crafted (1) CAB or (2) RAR archives that trigger a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.Show less
CVE-2006-3198 1Opera 1Opera Browser Apr 16, 2026 Jun 23, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 Integer overflow in Opera 8.54 and earlier allows remote attackers to execute arbitrary code via a JPEG image with large height and width values, which causes less memory to be allocated than intended.
CVE-2005-2976 1Gnome 2Gdkpixbuf Gtk Apr 16, 2026 Nov 18, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Integer overflow in io-xpm.c in gdk-pixbuf 0.22.0 in GTK+ before 2.8.7 allows attackers to cause a denial of service (crash) or execute arbitrary code via an XPM file with large height, width, and colour values, a differ...Show more Integer overflow in io-xpm.c in gdk-pixbuf 0.22.0 in GTK+ before 2.8.7 allows attackers to cause a denial of service (crash) or execute arbitrary code via an XPM file with large height, width, and colour values, a different vulnerability than CVE-2005-3186.Show less
CVE-2005-1513 3Canonical DebianQmail Project 3Debian Linux QmailUbuntu Linux Apr 16, 2026 May 11, 2005 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 Integer overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary co...Show more Integer overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large SMTP request.Show less
CVE-2005-1141 1Optical Character Recognition Project 1Optical Character Recognition Apr 16, 2026 Apr 15, 2005 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, which leads to a heap-b...Show more Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, which leads to a heap-based buffer overflow.Show less
CVE-2005-0102 2Debian Gnome 2Debian Linux Evolution Apr 16, 2026 Jan 24, 2005 N/A· v4 9.8 CRITICAL· v3 7.2 HIGH· v2 Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte memory allocation an...Show more Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte memory allocation and a buffer overflow.Show less
CVE-2004-2013 1Linux 1Linux Kernel Apr 16, 2026 Dec 31, 2004 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Integer overflow in the SCTP_SOCKOPT_DEBUG_NAME SCTP socket option in socket.c in the Linux kernel 2.4.25 and earlier allows local users to execute arbitrary code via an optlen value of -1, which causes kmalloc to alloca...Show more Integer overflow in the SCTP_SOCKOPT_DEBUG_NAME SCTP socket option in socket.c in the Linux kernel 2.4.25 and earlier allows local users to execute arbitrary code via an optlen value of -1, which causes kmalloc to allocate 0 bytes of memory.Show less
CVE-2004-0788 1Gnome 2Gdkpixbuf Gtk Apr 16, 2026 Oct 20, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Integer overflow in the ICO image decoder for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted ICO file.
CVE-2004-0657 2Hp Ntp 2Ntp Tru64 Unix Apr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Integer overflow in the NTP daemon (NTPd) before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time.

Previous 1...187 188 189190191 Next