CWE-190 · Integer Overflow or Wraparound (page 11)
Page 11 of 36 — CVEs classified under CWE-190, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-53187 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: io_uring: check for overflows in io_pin_pages WARNING: CPU: 0 PID: 5834 at io_uring/memma… |
CVE-2024-51540 | High | 8.1 | 2024-12-26 | Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user with bucket… |
CVE-2024-53161 | Medium | 5.5 | 2024-12-24 | In the Linux kernel, the following vulnerability has been resolved: EDAC/bluefield: Fix potential integer overflow The 64-bit argument for the "get DIMM info… |
CVE-2024-53151 | High | 7.5 | 2024-12-24 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Address an integer overflow Dan Carpenter reports: > Commit 78147ca8b4a9 ("svcrd… |
CVE-2024-53146 | Critical | 9.1 | 2024-12-24 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is >= U32_MAX - 3 then the "… |
CVE-2024-53145 | Medium | 5.5 | 2024-12-24 | In the Linux kernel, the following vulnerability has been resolved: um: Fix potential integer overflow during physmem setup This issue happens when the real… |
CVE-2024-52059 | High | 7.8 | 2024-12-13 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in RTI Connext… |
CVE-2024-49112 | Critical | 9.8 | 2024-12-12 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2024-49089 | High | 7.2 | 2024-12-12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-49085 | High | 8.8 | 2024-12-12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-49078 | Medium | 6.8 | 2024-12-12 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
CVE-2024-47606 | Critical | 9.8 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_theora_extens… |
CVE-2024-47537 | Critical | 9.8 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. The program attempts to reallocate the memory pointed to by stream->samples to acc… |
CVE-2024-52983 | High | 7.8 | 2024-12-10 | Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in th… |
CVE-2018-9404 | Medium | 6.7 | 2024-12-05 | In oemCallback of ril.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with Sy… |
CVE-2024-7488 | Medium | 5.3 | 2024-12-04 | Integer Overflow or Wraparound, Improper Validation of Specified Quantity in Input vulnerability in RestApp Inc. Online Ordering System allows Integer Attacks… |
CVE-2024-53111 | High | 7.1 | 2024-12-02 | In the Linux kernel, the following vulnerability has been resolved: mm/mremap: fix address wraparound in move_page_tables() On 32-bit platforms, it is possib… |
CVE-2024-53107 | High | 7.8 | 2024-12-02 | In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args() The "arg->vec_len"… |
CVE-2024-33063 | High | 7.5 | 2024-12-02 | Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present. |
CVE-2024-35366 | Critical | 9.1 | 2024-11-29 | FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain optio… |
CVE-2024-36616 | Medium | 6.5 | 2024-11-29 | An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafte… |
CVE-2024-36618 | Medium | 6.2 | 2024-11-29 | FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-serv… |
CVE-2024-36617 | Medium | 6.2 | 2024-11-29 | FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder. |
CVE-2024-36619 | Medium | 5.3 | 2024-11-29 | FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow when handling certain block types, leadi… |
CVE-2024-35369 | Medium | 5.5 | 2024-11-29 | In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certai… |
CVE-2024-36671 | Critical | 9.8 | 2024-11-29 | nodemcu before v3.0.0-release_20240225 was discovered to contain an integer overflow via the getnum function at /modules/struct.c. |
CVE-2018-9352 | Medium | 6.5 | 2024-11-27 | In ihevcd_allocate_dynamic_bufs of ihevcd_api.c there is a possible resource exhaustion due to integer overflow. This could lead to remote denial of service wi… |
CVE-2017-13323 | High | 7.8 | 2024-11-27 | In String16 of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in an unprivi… |
CVE-2024-7025 | High | 8.8 | 2024-11-27 | Integer overflow in Layout in Google Chrome prior to 129.0.6668.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C… |
CVE-2024-11236 | Critical | 9.8 | 2024-11-24 | In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can… |
CVE-2024-48983 | High | 7.5 | 2024-11-20 | An issue was discovered in MBed OS 6.16.0. During processing of HCI packets, the software dynamically determines the length of the packet data by reading 2 byt… |
CVE-2018-9482 | Medium | 6.5 | 2024-11-20 | In intr_data_copy_cb of btif_hd.cc, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure in the B… |
CVE-2018-9481 | Medium | 6.5 | 2024-11-20 | In bta_hd_set_report_act of bta_hd_act.cc, there is a possible out-of-bounds read due to an integer overflow. This could lead to remote information disclosure… |
CVE-2018-9472 | High | 8.8 | 2024-11-20 | In xmlMemStrdupLoc of xmlmemory.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution in an unprivile… |
CVE-2018-9366 | High | 7.8 | 2024-11-19 | In IMSA_Recv_Thread and VT_IMCB_Thread of ImsaClient.cpp and VideoTelephony.c, there is a possible out of bounds write due to an integer overflow. This could l… |
CVE-2018-9348 | Medium | 6.5 | 2024-11-19 | In SMF_ParseMetaEvent of eas_smf.c, there is a possible integer overflow. This could lead to remote denial of service due to resource exhaustion with no additi… |
CVE-2024-50270 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid overflow in damon_feed_loop_next_input() damon_feed_loop_next_input(… |
CVE-2024-42384 | High | 7.5 | 2024-11-18 | Integer Overflow or Wraparound vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentatio… |
CVE-2024-52919 | Medium | 6.5 | 2024-11-18 | Bitcoin Core before 22.0 has a CAddrMan nIdCount integer overflow and resultant assertion failure (and daemon exit) via a flood of addr messages. |
CVE-2024-52912 | High | 7.5 | 2024-11-18 | Bitcoin Core before 0.21.0 allows a network split that is resultant from an integer overflow (calculating the time offset for newly connecting peers) and an ab… |
CVE-2022-20685 | High | 7.5 | 2024-11-15 | A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS) con… |
CVE-2024-21783 | Medium | 4.8 | 2024-11-13 | Integer overflow for some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially enable escalation of privilege via local a… |
CVE-2024-43091 | Critical | 9.8 | 2024-11-13 | In filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no a… |
CVE-2024-43641 | High | 7.8 | 2024-11-12 | Windows Registry Elevation of Privilege Vulnerability |
CVE-2024-43635 | High | 8.8 | 2024-11-12 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2024-43628 | High | 8.8 | 2024-11-12 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2024-43623 | High | 7.8 | 2024-11-12 | Windows NT OS Kernel Elevation of Privilege Vulnerability |
CVE-2024-10917 | Low | 3.7 | 2024-11-11 | In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From 0.48 the value is corre… |
CVE-2024-46953 | High | 7.8 | 2024-11-10 | An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the output f… |
CVE-2024-46613 | Critical | 9.8 | 2024-11-10 | WeeChat before 4.4.2 has an integer overflow and resultant buffer overflow at core/core-string.c when there are more than two billion items in a list. This aff… |
CVE-2024-50177 | Medium | 5.5 | 2024-11-08 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a UBSAN warning in DML2.1 When programming phantom pipe, since curso… |
CVE-2024-50610 | Low | 3.6 | 2024-10-27 | GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect m… |
CVE-2024-47028 | Medium | 4.4 | 2024-10-25 | In ffu_flash_pack of ffu.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System exec… |
CVE-2024-47024 | High | 7.8 | 2024-10-25 | In vring_size of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to an integer overflow. This could lead to local es… |
CVE-2024-46483 | Critical | 9.8 | 2024-10-22 | Xlight FTP Server <3.9.4.3 has an integer overflow vulnerability in the packet parsing logic of the SFTP server, which can lead to a heap overflow with attacke… |
CVE-2024-42643 | High | 7.5 | 2024-10-22 | Integer Overflow in fast_ping.c in SmartDNS Release46 allows remote attackers to cause a Denial of Service via misaligned memory access. |
CVE-2022-49030 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: libbpf: Handle size overflow for ringbuf mmap The maximum size of ringbuf is 2GB on x86-6… |
CVE-2022-48987 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-dv-timings.c: fix too strict blanking sanity checks Sanity checks were added… |
CVE-2022-48947 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix u8 overflow By keep sending L2CAP_CONF_REQ packets, chan->num_conf_… |
CVE-2024-49994 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: block: fix integer overflow in BLKSECDISCARD I independently rediscovered commit 22d24a… |
CVE-2024-49888 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a sdiv overflow issue Zac Ecob reported a problem where a bpf program may cause… |
CVE-2024-47739 | High | 7.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: padata: use integer wrap around to prevent deadlock on seq_nr overflow When submitting mo… |
CVE-2024-43566 | High | 7.5 | 2024-10-17 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-47661 | Medium | 5.5 | 2024-10-09 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid overflow from uint32_t to uint8_t [WHAT & HOW] dmub_rb_cmd's rampi… |
CVE-2024-47424 | High | 7.8 | 2024-10-09 | Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execut… |
CVE-2024-47416 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in th… |
CVE-2024-37976 | Medium | 6.7 | 2024-10-08 | Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability |
CVE-2024-34663 | Medium | 5.3 | 2024-10-08 | Integer overflow in libSEF.quram.so prior to SMR Oct-2024 Release 1 allows local attackers to write out-of-bounds memory. |
CVE-2024-42415 | High | 8.4 | 2024-10-03 | An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf)… |
CVE-2024-36474 | High | 8.4 | 2024-10-03 | An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library (libgsf) version v1… |
CVE-2024-20434 | Medium | 4.3 | 2024-09-25 | A vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the control plane of… |
CVE-2024-9123 | High | 8.8 | 2024-09-25 | Integer overflow in Skia in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (C… |
CVE-2024-46726 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Ensure index calculation will not overflow [WHY & HOW] Make sure vmid0p7… |
CVE-2024-44198 | Medium | 5.5 | 2024-09-17 | An integer overflow was addressed through improved input validation. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchO… |
CVE-2023-45854 | High | 7.5 | 2024-09-16 | A Business Logic vulnerability in Shopkit 1.0 allows an attacker to add products with negative quantities to the shopping cart via the qtd parameter in the add… |
CVE-2024-31416 | Medium | 5.6 | 2024-09-13 | The Eaton Foreseer software provides multiple customizable input fields for the users to configure parameters in the tool like alarms, reports, etc. Some of th… |
CVE-2024-34121 | High | 7.8 | 2024-09-13 | Illustrator versions 28.6, 27.9.5 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in… |
CVE-2024-43495 | High | 7.3 | 2024-09-10 | Windows libarchive Remote Code Execution Vulnerability |
CVE-2024-44087 | High | 8.6 | 2024-09-10 | A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6.0 (All versions < V6.0 SP12 Upd3), Automatio… |
CVE-2024-45287 | High | 7.5 | 2024-09-05 | A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a smaller buffer than required for the par… |
CVE-2024-44981 | Medium | 5.5 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix UBSAN 'subtraction overflow' error in shift_and_mask() UBSAN reports the f… |
CVE-2024-33035 | High | 8.4 | 2024-09-02 | Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients. |
CVE-2024-28044 | Low | 3.3 | 2024-09-02 | in OpenHarmony v4.1.0 and prior versions allow a local attacker cause crash through integer overflow. |
CVE-2024-45492 | Critical | 9.8 | 2024-08-30 | An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_M… |
CVE-2024-45491 | Critical | 9.8 | 2024-08-30 | An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equal… |
CVE-2024-45490 | High | 7.5 | 2024-08-30 | An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer. |
CVE-2024-43890 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix overflow in get_free_elt() "tracing_map->next_elt" in get_free_elt() is at r… |
CVE-2022-48938 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: CDC-NCM: avoid overflow in sanity checking A broken device may give an extreme offset lik… |
CVE-2024-30949 | Critical | 9.8 | 2024-08-20 | An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function. |
CVE-2024-43838 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: bpf: fix overflow check in adjust_jmp_off() adjust_jmp_off() incorrectly used the insn->i… |
CVE-2024-34740 | High | 7.8 | 2024-08-15 | In attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a possible arbitrary XML injection due to an integer overflow. This could l… |
CVE-2024-31333 | High | 7.8 | 2024-08-15 | In _MMU_AllocLevel of mmu_common.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of privilege i… |
CVE-2024-7867 | Medium | 6.2 | 2024-08-15 | In Xpdf 4.05 (and earlier), very large coordinates in a page box can cause an integer overflow and divide-by-zero. |
CVE-2024-41851 | High | 7.8 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code exec… |
CVE-2024-21844 | Medium | 4.3 | 2024-08-14 | Integer overflow in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable denial of service via adjacent access. |
CVE-2024-41858 | High | 7.8 | 2024-08-14 | InCopy versions 18.5.2, 19.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the c… |
CVE-2024-38215 | High | 7.8 | 2024-08-13 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2024-38144 | High | 8.8 | 2024-08-13 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38128 | High | 8.8 | 2024-08-13 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-33024 | High | 7.5 | 2024-08-05 | Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length. |