CWE-190 · Integer Overflow or Wraparound (page 10)
Page 10 of 34 — CVEs classified under CWE-190, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-37310 | Critical | 9.0 | 2024-07-10 | EVerest is an EV charging software stack. An integer overflow in the "v2g_incoming_v2gtp" function in the v2g_server.cpp implementation can allow a remote atta… |
CVE-2024-23695 | High | 7.8 | 2024-07-09 | In CacheOpPMRExec of cache_km.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in the ke… |
CVE-2024-34139 | High | 7.8 | 2024-07-09 | Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution… |
CVE-2024-39684 | High | 7.8 | 2024-07-09 | Tencent RapidJSON is vulnerable to privilege escalation due to an integer overflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader… |
CVE-2024-38080 | High | 7.8 | 2024-07-09 | Windows Hyper-V Elevation of Privilege Vulnerability |
CVE-2024-38034 | High | 7.8 | 2024-07-09 | Windows Filtering Platform Elevation of Privilege Vulnerability |
CVE-2024-38019 | High | 7.2 | 2024-07-09 | Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability |
CVE-2024-37336 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-37323 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-26184 | Medium | 6.8 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-21428 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-1305 | Critical | 9.8 | 2024-07-08 | tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory… |
CVE-2023-45742 | High | 7.2 | 2024-07-08 | An integer overflow vulnerability exists in the boa updateConfigIntoFlash functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HT… |
CVE-2024-23372 | High | 8.4 | 2024-07-01 | Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size. |
CVE-2024-38661 | Medium | 5.5 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: s390/ap: Fix crash in AP internal function modify_bitmap() A system crash like this Fa… |
CVE-2024-38624 | Medium | 5.5 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow For example, in the expression: v… |
CVE-2024-37356 | Medium | 5.5 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). In dctcp_update_alpha(), we use a m… |
CVE-2024-37305 | High | 8.2 | 2024-06-17 | oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and S/MIME using post-quantum… |
CVE-2024-32913 | Critical | 9.8 | 2024-06-13 | In wl_notify_rx_mgmt_frame of wl_cfg80211.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with… |
CVE-2024-29784 | High | 7.8 | 2024-06-13 | In prepare_response of lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege… |
CVE-2024-30072 | High | 7.8 | 2024-06-11 | Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability |
CVE-2024-30067 | Medium | 5.5 | 2024-06-11 | Winlogon Elevation of Privilege Vulnerability |
CVE-2024-30064 | High | 8.8 | 2024-06-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-27833 | High | 8.8 | 2024-06-10 | An integer overflow was addressed with improved input validation. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, t… |
CVE-2024-36968 | High | 7.6 | 2024-06-08 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() l2cap_le_flowctl_init() can… |
CVE-2023-49441 | High | 7.5 | 2024-06-06 | dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query. |
CVE-2024-5171 | Critical | 9.8 | 2024-06-05 | Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Calling aom_… |
CVE-2024-36121 | Medium | 5.9 | 2024-06-04 | netty-incubator-codec-ohttp is the OHTTP implementation for netty. BoringSSLAEADContext keeps track of how many OHTTP responses have been sent and uses this s… |
CVE-2024-5197 | Critical | 9.1 | 2024-06-03 | There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may resul… |
CVE-2023-43545 | Medium | 6.7 | 2024-06-03 | Memory corruption when more scan frequency list or channels are sent from the user space. |
CVE-2024-36948 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/xe_migrate: Cast to output precision before multiplying operands Addressing potent… |
CVE-2024-36918 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: bpf: Check bloom filter map value size This patch adds a missing check to bloom filter cr… |
CVE-2024-36917 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: block: fix overflow in blk_ioctl_discard() There is no check for overflow of 'start + len… |
CVE-2024-30212 | | 2024-05-28 | If a SCSI READ(10) command is initiated via USB using the largest LBA (0xFFFFFFFF) with it's default block size of 512 and a count of 1, the first 512 byte o… | |
CVE-2024-4453 | High | 7.8 | 2024-05-22 | GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… |
CVE-2023-52857 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix coverity issue with unintentional integer overflow 1. Instead of multip… |
CVE-2023-52762 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: virtio-blk: fix implicit overflow on virtio_max_dma_size The following codes have an impl… |
CVE-2021-47432 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Don't overflow in peek() When we started spreading new inode nu… |
CVE-2024-35905 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduces protecti… |
CVE-2023-52676 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: bpf: Guard stack limits against 32bit overflow This patch promotes the arithmetic around… |
CVE-2024-35827 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: io_uring/net: fix overflow check in io_recvmsg_mshot_prep() The "controllen" variable is… |
CVE-2024-30021 | Medium | 6.8 | 2024-05-14 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-30012 | Medium | 6.8 | 2024-05-14 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-30005 | Medium | 6.8 | 2024-05-14 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-30004 | Medium | 6.8 | 2024-05-14 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-30003 | Medium | 6.8 | 2024-05-14 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-30001 | Medium | 6.8 | 2024-05-14 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-30000 | Medium | 6.8 | 2024-05-14 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-29999 | Medium | 6.8 | 2024-05-14 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-29997 | Medium | 6.8 | 2024-05-14 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-32655 | High | 8.1 | 2024-05-14 | Npgsql is the .NET data provider for PostgreSQL. The `WriteBind()` method in `src/Npgsql/Internal/NpgsqlConnector.FrontendMessages.cs` uses `int` variables to… |
CVE-2024-3757 | Low | 3.3 | 2024-05-07 | in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through integer overflow. |
CVE-2023-43530 | Medium | 5.9 | 2024-05-06 | Memory corruption in HLOS while checking for the storage type. |
CVE-2023-44443 | High | 7.8 | 2024-05-03 | GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected in… |
CVE-2023-41185 | High | 7.5 | 2024-05-03 | Unified Automation UaGateway Certificate Parsing Integer Overflow Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denia… |
CVE-2023-40475 | High | 8.8 | 2024-05-03 | GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect… |
CVE-2023-40474 | High | 8.8 | 2024-05-03 | GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect… |
CVE-2023-38104 | High | 8.8 | 2024-05-03 | GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2023-38103 | High | 8.8 | 2024-05-03 | GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2023-37327 | High | 8.8 | 2024-05-03 | GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-34403 | Medium | 5.9 | 2024-05-03 | An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string. |
CVE-2024-34402 | High | 8.6 | 2024-05-03 | An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer o… |
CVE-2023-47212 | Critical | 9.8 | 2024-05-01 | A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22. A specially crafted .ogg file can lead to an out-of-boun… |
CVE-2024-21905 | Medium | 6.5 | 2024-04-26 | An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow… |
CVE-2024-32039 | Critical | 9.8 | 2024-04-22 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients using a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to in… |
CVE-2024-23531 | High | 7.5 | 2024-04-19 | An Integer Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows an unauthenticated remote attacker to perform denial o… |
CVE-2024-31031 | High | 7.5 | 2024-04-17 | An issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integer overflow. |
CVE-2024-26884 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix hashtab overflow check on 32-bit arches The hashtab code relies on roundup_pow_o… |
CVE-2024-21105 | Low | 2.0 | 2024-04-16 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11. Easily exploitable vulnerab… |
CVE-2024-3859 | Medium | 5.9 | 2024-04-16 | On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by a malformed OpenType font. This vulner… |
CVE-2024-26817 | Medium | 5.5 | 2024-04-13 | In the Linux kernel, the following vulnerability has been resolved: amdkfd: use calloc instead of kzalloc to avoid integer overflow This uses calloc instead… |
CVE-2024-20795 | High | 7.8 | 2024-04-11 | Animate versions 23.0.4, 24.0.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in th… |
CVE-2024-28942 | High | 8.8 | 2024-04-09 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2024-28936 | High | 8.8 | 2024-04-09 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2024-28931 | High | 8.8 | 2024-04-09 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2024-28929 | High | 8.8 | 2024-04-09 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2024-28923 | Medium | 6.4 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-26171 | Medium | 6.7 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-31047 | Low | 3.3 | 2024-04-08 | An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service (DoS) via the convert function of exrmu… |
CVE-2024-26668 | Medium | 5.5 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_limit: reject configurations that cause integer overflow Reject bogus conf… |
CVE-2024-21470 | High | 8.4 | 2024-04-01 | Memory corruption while allocating memory for graphics. |
CVE-2024-21454 | High | 7.5 | 2024-04-01 | Transient DOS while decoding the ToBeSignedMessage in Automotive Telematics. |
CVE-2024-20047 | Medium | 5.4 | 2024-04-01 | In battery, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges… |
CVE-2024-20046 | Medium | 6.6 | 2024-04-01 | In battery, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege with System execution priv… |
CVE-2024-3077 | Medium | 6.8 | 2024-03-29 | An malicious BLE device can crash BLE victim device by sending malformed gatt packet |
CVE-2024-2452 | High | 7.0 | 2024-03-26 | In Eclipse ThreadX NetX Duo before 6.4.0, if an attacker can control parameters of __portable_aligned_alloc() could cause an integer wrap-around and an alloc… |
CVE-2024-2212 | High | 7.3 | 2024-03-26 | In Eclipse ThreadX before 6.4.0, xQueueCreate() and xQueueCreateSet() functions from the FreeRTOS compatibility API (utility/rtos_compatibility_layers/FreeR… |
CVE-2021-47109 | High | 7.5 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: neighbour: allow NUD_NOARP entries to be forced GCed IFF_POINTOPOINT interfaces use NUD_N… |
CVE-2024-1917 | Critical | 9.8 | 2024-03-15 | Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated… |
CVE-2024-1916 | Critical | 9.8 | 2024-03-15 | Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated… |
CVE-2024-0803 | Critical | 9.8 | 2024-03-15 | Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated… |
CVE-2024-22396 | Medium | 5.3 | 2024-03-14 | An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and po… |
CVE-2024-21450 | High | 8.8 | 2024-03-12 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21444 | High | 8.8 | 2024-03-12 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21441 | High | 8.8 | 2024-03-12 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-27304 | Critical | 9.8 | 2024-03-06 | pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integ… |
CVE-2021-47098 | High | 7.8 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations Commit b50aa4… |
CVE-2023-43550 | High | 7.8 | 2024-03-04 | Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem. |
CVE-2024-20025 | Medium | 6.7 | 2024-03-04 | In da, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2024-27101 | High | 7.3 | 2024-03-01 | SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions. Integer overflow in chunking… |