CWE-190 · Integer Overflow or Wraparound (page 12)
Page 12 of 37 — CVEs classified under CWE-190, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-48938 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: CDC-NCM: avoid overflow in sanity checking A broken device may give an extreme offset lik… |
CVE-2024-30949 | Critical | 9.8 | 2024-08-20 | An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function. |
CVE-2024-43838 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: bpf: fix overflow check in adjust_jmp_off() adjust_jmp_off() incorrectly used the insn->i… |
CVE-2024-34740 | High | 7.8 | 2024-08-15 | In attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a possible arbitrary XML injection due to an integer overflow. This could l… |
CVE-2024-31333 | High | 7.8 | 2024-08-15 | In _MMU_AllocLevel of mmu_common.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of privilege i… |
CVE-2024-7867 | Medium | 6.2 | 2024-08-15 | In Xpdf 4.05 (and earlier), very large coordinates in a page box can cause an integer overflow and divide-by-zero. |
CVE-2024-41851 | High | 7.8 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code exec… |
CVE-2024-21844 | Medium | 4.3 | 2024-08-14 | Integer overflow in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable denial of service via adjacent access. |
CVE-2024-41858 | High | 7.8 | 2024-08-14 | InCopy versions 18.5.2, 19.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the c… |
CVE-2024-38215 | High | 7.8 | 2024-08-13 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2024-38144 | High | 8.8 | 2024-08-13 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38128 | High | 8.8 | 2024-08-13 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-33024 | High | 7.5 | 2024-08-05 | Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length. |
CVE-2024-33022 | High | 8.4 | 2024-08-05 | Memory corruption while allocating memory in HGSL driver. |
CVE-2023-33976 | High | 7.5 | 2024-07-30 | TensorFlow is an end-to-end open source platform for machine learning. `array_ops.upper_bound` causes a segfault when not given a rank 2 tensor. The fix will b… |
CVE-2024-42223 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: tda10048: Fix integer overflow state->xtal_hz can be up to 16M, so… |
CVE-2024-42136 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: cdrom: rearrange last_media_change check to avoid unintentional overflow When running syz… |
CVE-2024-42131 | Medium | 4.4 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: mm: avoid overflows in dirty throttling logic The dirty throttling logic is interspersed… |
CVE-2024-40784 | Medium | 5.5 | 2024-07-29 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 1… |
CVE-2024-42066 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix potential integer overflow in page size calculation Explicitly cast tbo->page… |
CVE-2024-6638 | Medium | 5.5 | 2024-07-22 | An integer overflow vulnerability due to improper input validation when reading TDMS files in LabVIEW may result in an infinite loop. Successful exploitation… |
CVE-2024-41184 | Critical | 9.8 | 2024-07-18 | In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile… |
CVE-2022-48837 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: rndis: prevent integer overflow in rndis_set_response() If "BufOffset" is ve… |
CVE-2022-48806 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX Commit effa453168a7 ("i2c: i801: D… |
CVE-2024-41000 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: block/ioctl: prefer different overflow check Running syzkaller with the newly reintroduce… |
CVE-2024-40994 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ptp: fix integer overflow in max_vclocks_store On 32bit systems, the "4 * max" multiply c… |
CVE-2024-37310 | Critical | 9.0 | 2024-07-10 | EVerest is an EV charging software stack. An integer overflow in the "v2g_incoming_v2gtp" function in the v2g_server.cpp implementation can allow a remote atta… |
CVE-2024-23695 | High | 7.8 | 2024-07-09 | In CacheOpPMRExec of cache_km.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in the ke… |
CVE-2024-34139 | High | 7.8 | 2024-07-09 | Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution… |
CVE-2024-39684 | High | 7.8 | 2024-07-09 | Tencent RapidJSON is vulnerable to privilege escalation due to an integer overflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader… |
CVE-2024-38080 | High | 7.8 | 2024-07-09 | Windows Hyper-V Elevation of Privilege Vulnerability |
CVE-2024-38034 | High | 7.8 | 2024-07-09 | Windows Filtering Platform Elevation of Privilege Vulnerability |
CVE-2024-38019 | High | 7.2 | 2024-07-09 | Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability |
CVE-2024-37336 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-37323 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-26184 | Medium | 6.8 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-21428 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-1305 | Critical | 9.8 | 2024-07-08 | tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory… |
CVE-2023-45742 | High | 7.2 | 2024-07-08 | An integer overflow vulnerability exists in the boa updateConfigIntoFlash functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HT… |
CVE-2024-23372 | High | 8.4 | 2024-07-01 | Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size. |
CVE-2024-38661 | Medium | 5.5 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: s390/ap: Fix crash in AP internal function modify_bitmap() A system crash like this Fa… |
CVE-2024-38624 | Medium | 5.5 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow For example, in the expression: v… |
CVE-2024-37356 | Medium | 5.5 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). In dctcp_update_alpha(), we use a m… |
CVE-2024-37305 | High | 8.2 | 2024-06-17 | oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and S/MIME using post-quantum… |
CVE-2024-32913 | Critical | 9.8 | 2024-06-13 | In wl_notify_rx_mgmt_frame of wl_cfg80211.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with… |
CVE-2024-29784 | High | 7.8 | 2024-06-13 | In prepare_response of lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege… |
CVE-2024-30072 | High | 7.8 | 2024-06-11 | Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability |
CVE-2024-30067 | Medium | 5.5 | 2024-06-11 | Winlogon Elevation of Privilege Vulnerability |
CVE-2024-30064 | High | 8.8 | 2024-06-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-27833 | High | 8.8 | 2024-06-10 | An integer overflow was addressed with improved input validation. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, t… |
CVE-2024-36968 | High | 7.6 | 2024-06-08 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() l2cap_le_flowctl_init() can… |
CVE-2023-49441 | High | 7.5 | 2024-06-06 | dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query. |
CVE-2024-5171 | Critical | 9.8 | 2024-06-05 | Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Calling aom_… |
CVE-2024-36121 | Medium | 5.9 | 2024-06-04 | netty-incubator-codec-ohttp is the OHTTP implementation for netty. BoringSSLAEADContext keeps track of how many OHTTP responses have been sent and uses this s… |
CVE-2024-5197 | Critical | 9.1 | 2024-06-03 | There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may resul… |
CVE-2023-43545 | Medium | 6.7 | 2024-06-03 | Memory corruption when more scan frequency list or channels are sent from the user space. |
CVE-2024-36948 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/xe_migrate: Cast to output precision before multiplying operands Addressing potent… |
CVE-2024-36918 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: bpf: Check bloom filter map value size This patch adds a missing check to bloom filter cr… |
CVE-2024-36917 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: block: fix overflow in blk_ioctl_discard() There is no check for overflow of 'start + len… |
CVE-2024-30212 | | 2024-05-28 | If a SCSI READ(10) command is initiated via USB using the largest LBA (0xFFFFFFFF) with it's default block size of 512 and a count of 1, the first 512 byte o… | |
CVE-2024-4453 | High | 7.8 | 2024-05-22 | GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… |
CVE-2023-52857 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix coverity issue with unintentional integer overflow 1. Instead of multip… |
CVE-2023-52762 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: virtio-blk: fix implicit overflow on virtio_max_dma_size The following codes have an impl… |
CVE-2021-47432 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Don't overflow in peek() When we started spreading new inode nu… |
CVE-2024-35905 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduces protecti… |
CVE-2023-52676 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: bpf: Guard stack limits against 32bit overflow This patch promotes the arithmetic around… |
CVE-2024-35827 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: io_uring/net: fix overflow check in io_recvmsg_mshot_prep() The "controllen" variable is… |
CVE-2024-30021 | Medium | 6.8 | 2024-05-14 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-30012 | Medium | 6.8 | 2024-05-14 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-30005 | Medium | 6.8 | 2024-05-14 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-30004 | Medium | 6.8 | 2024-05-14 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-30003 | Medium | 6.8 | 2024-05-14 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-30001 | Medium | 6.8 | 2024-05-14 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-30000 | Medium | 6.8 | 2024-05-14 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-29999 | Medium | 6.8 | 2024-05-14 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-29997 | Medium | 6.8 | 2024-05-14 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-32655 | High | 8.1 | 2024-05-14 | Npgsql is the .NET data provider for PostgreSQL. The `WriteBind()` method in `src/Npgsql/Internal/NpgsqlConnector.FrontendMessages.cs` uses `int` variables to… |
CVE-2024-3757 | Low | 3.3 | 2024-05-07 | in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through integer overflow. |
CVE-2023-43530 | Medium | 5.9 | 2024-05-06 | Memory corruption in HLOS while checking for the storage type. |
CVE-2023-44443 | High | 7.8 | 2024-05-03 | GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected in… |
CVE-2023-41185 | High | 7.5 | 2024-05-03 | Unified Automation UaGateway Certificate Parsing Integer Overflow Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denia… |
CVE-2023-40475 | High | 8.8 | 2024-05-03 | GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect… |
CVE-2023-40474 | High | 8.8 | 2024-05-03 | GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect… |
CVE-2023-38104 | High | 8.8 | 2024-05-03 | GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2023-38103 | High | 8.8 | 2024-05-03 | GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2023-37327 | High | 8.8 | 2024-05-03 | GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-34403 | Medium | 5.9 | 2024-05-03 | An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string. |
CVE-2024-34402 | High | 8.6 | 2024-05-03 | An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer o… |
CVE-2023-47212 | Critical | 9.8 | 2024-05-01 | A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22. A specially crafted .ogg file can lead to an out-of-boun… |
CVE-2024-21905 | Medium | 6.5 | 2024-04-26 | An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow… |
CVE-2024-32039 | Critical | 9.8 | 2024-04-22 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients using a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to in… |
CVE-2024-23531 | High | 7.5 | 2024-04-19 | An Integer Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows an unauthenticated remote attacker to perform denial o… |
CVE-2024-31031 | High | 7.5 | 2024-04-17 | An issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integer overflow. |
CVE-2024-26884 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix hashtab overflow check on 32-bit arches The hashtab code relies on roundup_pow_o… |
CVE-2024-21105 | Low | 2.0 | 2024-04-16 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11. Easily exploitable vulnerab… |
CVE-2024-3859 | Medium | 5.9 | 2024-04-16 | On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by a malformed OpenType font. This vulner… |
CVE-2024-26817 | Medium | 5.5 | 2024-04-13 | In the Linux kernel, the following vulnerability has been resolved: amdkfd: use calloc instead of kzalloc to avoid integer overflow This uses calloc instead… |
CVE-2024-20795 | High | 7.8 | 2024-04-11 | Animate versions 23.0.4, 24.0.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in th… |
CVE-2024-28942 | High | 8.8 | 2024-04-09 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2024-28936 | High | 8.8 | 2024-04-09 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |