CWE-190 · Integer Overflow or Wraparound (page 12)
Page 12 of 34 — CVEs classified under CWE-190, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-36401 | High | 7.2 | 2023-11-14 | Microsoft Remote Registry Service Remote Code Execution Vulnerability |
CVE-2023-36395 | High | 7.5 | 2023-11-14 | Windows Deployment Services Denial of Service Vulnerability |
CVE-2023-4949 | High | 8.1 | 2023-11-10 | An attacker with local access to a system (either through a disk or external drive) can present a modified XFS partition to grub-legacy in such a way to exploi… |
CVE-2023-4295 | High | 7.8 | 2023-11-07 | A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. |
CVE-2023-5849 | High | 8.8 | 2023-11-01 | Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2023-21375 | High | 7.8 | 2023-10-30 | In Sysproxy, there is a possible out of bounds write due to an integer underflow. This could lead to local escalation of privilege with no additional execution… |
CVE-2023-21371 | Medium | 6.7 | 2023-10-30 | In Secure Element, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution p… |
CVE-2023-21370 | Medium | 6.7 | 2023-10-30 | In the Security Element API, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System e… |
CVE-2023-46246 | Medium | 4.0 | 2023-10-27 | Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function `ga_grow_inner` in in the file `src/alloc.c`… |
CVE-2023-42295 | High | 8.8 | 2023-10-23 | An issue in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of service via the read_rle_image function of fil… |
CVE-2023-45681 | High | 7.3 | 2023-10-21 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory write past an allocated heap buffer in `sta… |
CVE-2023-3487 | High | 7.7 | 2023-10-20 | An integer overflow in Silicon Labs Gecko Bootloader version 4.3.1 and earlier allows unbounded memory access when reading from or writing to storage slots. |
CVE-2023-38127 | High | 7.8 | 2023-10-19 | An integer overflow exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372. A specially crafted document can cause the parser to make an und… |
CVE-2023-46228 | High | 7.8 | 2023-10-19 | zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c. |
CVE-2023-45853 | Critical | 9.8 | 2023-10-14 | MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra… |
CVE-2023-42752 | Medium | 5.5 | 2023-10-13 | An integer overflow flaw was found in the Linux kernel. This issue leads to the kernel allocating `skb_shared_info` in the userspace, which is exploitable in s… |
CVE-2023-42298 | Medium | 5.5 | 2023-10-12 | An issue in GPAC GPAC v.2.2.1 and before allows a local attacker to cause a denial of service via the Q_DecCoordOnUnitSphere function of file src/bifs/unquanti… |
CVE-2023-35968 | Critical | 9.8 | 2023-10-11 | Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A specially crafted netw… |
CVE-2023-35967 | Critical | 9.8 | 2023-10-11 | Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A specially crafted netw… |
CVE-2023-35966 | Critical | 9.8 | 2023-10-11 | Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafted network request c… |
CVE-2023-35965 | Critical | 9.8 | 2023-10-11 | Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafted network request c… |
CVE-2023-37536 | High | 8.2 | 2023-10-11 | An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request. |
CVE-2023-36593 | High | 7.8 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36582 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36576 | Medium | 5.5 | 2023-10-10 | Windows Kernel Information Disclosure Vulnerability |
CVE-2023-36478 | High | 7.5 | 2023-10-10 | Eclipse Jetty provides a web server and servlet container. In versions 11.0.0 through 11.0.15, 10.0.0 through 10.0.15, and 9.0.0 through 9.4.52, an integer ove… |
CVE-2023-43787 | High | 7.8 | 2023-10-10 | A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow… |
CVE-2023-41175 | Medium | 6.5 | 2023-10-05 | A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw allows remote attackers to cause a denial of service… |
CVE-2023-40745 | Medium | 6.5 | 2023-10-05 | LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an arbitra… |
CVE-2023-32829 | Medium | 6.7 | 2023-10-02 | In apusys, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-32828 | Medium | 6.7 | 2023-10-02 | In vpu, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2023-32823 | Medium | 6.7 | 2023-10-02 | In rpmb , there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-5173 | High | 7.5 | 2023-09-27 | In a non-standard configuration of Firefox, an integer overflow could have occurred based on network traffic (possibly under influence of a local unprivileged… |
CVE-2023-38150 | High | 7.8 | 2023-09-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-38142 | High | 7.8 | 2023-09-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-36792 | High | 7.8 | 2023-09-12 | Visual Studio Remote Code Execution Vulnerability |
CVE-2023-40218 | Low | 2.0 | 2023-09-12 | An issue was discovered in the NPU kernel driver in Samsung Exynos Mobile Processor 9820, 980, 2100, 2200, 1280, and 1380. An integer overflow can bypass detec… |
CVE-2023-28831 | High | 7.5 | 2023-09-12 | The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infi… |
CVE-2023-35681 | Critical | 9.8 | 2023-09-11 | In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution w… |
CVE-2023-35673 | High | 8.8 | 2023-09-11 | In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximal/adjacent) code e… |
CVE-2023-4576 | High | 8.6 | 2023-09-11 | On Windows, an integer overflow could occur in `RecordedSourceSurfaceCreation` which resulted in a heap buffer overflow potentially leaking sensitive data that… |
CVE-2023-40353 | Low | 2.0 | 2023-09-08 | An issue was discovered in Exynos Mobile Processor 980 and 2100. An integer overflow at a buffer index can prevent the execution of requested services via a cr… |
CVE-2023-21655 | Medium | 6.7 | 2023-09-05 | Memory corruption in Audio while validating and mapping metadata. |
CVE-2023-21644 | Medium | 6.7 | 2023-09-05 | Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request. |
CVE-2023-4734 | High | 7.8 | 2023-09-02 | Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846. |
CVE-2023-4722 | Medium | 5.5 | 2023-09-01 | Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.3-DEV. |
CVE-2023-36328 | Critical | 9.8 | 2023-09-01 | Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary co… |
CVE-2023-36327 | Critical | 9.8 | 2023-09-01 | Integer Overflow vulnerability in RELIC before commit 421f2e91cf2ba42473d4d54daf24e295679e290e, allows attackers to execute arbitrary code and cause a denial o… |
CVE-2023-36326 | Critical | 9.8 | 2023-09-01 | Integer Overflow vulnerability in RELIC before commit 34580d840469361ba9b5f001361cad659687b9ab, allows attackers to execute arbitrary code, cause a denial of s… |
CVE-2023-40186 | Medium | 6.5 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an IntegerOverflow l… |
CVE-2023-40022 | High | 7.8 | 2023-08-24 | Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.6.0 and prior are vulnerable to integer overflow in `consume_count` of… |
CVE-2020-21699 | High | 7.5 | 2023-08-22 | The web server Tengine 2.2.2 developed in the Nginx version from 0.5.6 thru 1.13.2 is vulnerable to an integer overflow vulnerability in the nginx range filter… |
CVE-2020-19909 | Low | 3.3 | 2023-08-22 | Integer overflow vulnerability in tool_operate.c in curl 7.65.2 via a large value as the retry delay. NOTE: many parties report that this has no direct securit… |
CVE-2023-39125 | High | 7.5 | 2023-08-18 | NTSC-CRT 2.2.1 has an integer overflow and out-of-bounds write in loadBMP in bmp_rw.c because a file's width, height, and BPP are not validated. NOTE: the vend… |
CVE-2023-2914 | High | 7.5 | 2023-08-17 | The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, an integer overflow condition exists in the affected… |
CVE-2021-28429 | Medium | 5.5 | 2023-08-11 | Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service… |
CVE-2021-28025 | Medium | 5.5 | 2023-08-11 | Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a denial of service (DoS). |
CVE-2023-35085 | Critical | 9.8 | 2023-08-10 | An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings enabled co… |
CVE-2023-36911 | Critical | 9.8 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36910 | Critical | 9.8 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36900 | High | 7.8 | 2023-08-08 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2023-36866 | High | 7.8 | 2023-08-08 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2023-35385 | Critical | 9.8 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-35383 | High | 7.5 | 2023-08-08 | Microsoft Message Queuing Information Disclosure Vulnerability |
CVE-2023-35381 | High | 8.8 | 2023-08-08 | Windows Fax Service Remote Code Execution Vulnerability |
CVE-2023-35372 | High | 7.8 | 2023-08-08 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2023-28537 | High | 8.4 | 2023-08-08 | Memory corruption while allocating memory in COmxApeDec module in Audio. |
CVE-2023-22666 | High | 8.4 | 2023-08-08 | Memory Corruption in Audio while playing amrwbplus clips with modified content. |
CVE-2023-38698 | Medium | 4.9 | 2023-08-04 | Ethereum Name Service (ENS) is a distributed, open, and extensible naming system based on the Ethereum blockchain. According to the documentation, controllers… |
CVE-2023-3107 | High | 7.5 | 2023-08-01 | A set of carefully crafted ipv6 packets can trigger an integer overflow in the calculation of a fragment reassembled packet's payload length field. This allows… |
CVE-2023-38560 | Medium | 5.5 | 2023-08-01 | An integer overflow flaw was found in pcl/pl/plfont.c:418 in pl_glyph_name in ghostscript. This issue may allow a local attacker to cause a denial of service v… |
CVE-2023-36495 | Critical | 9.8 | 2023-07-28 | An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.6, macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, tvOS… |
CVE-2022-41409 | High | 7.5 | 2023-07-18 | Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input. |
CVE-2022-33065 | High | 7.8 | 2023-07-18 | Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an… |
CVE-2023-38403 | High | 7.5 | 2023-07-17 | iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field. |
CVE-2023-21241 | High | 7.8 | 2023-07-13 | In rw_i93_send_to_upper of rw_i93.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with… |
CVE-2023-35364 | High | 8.8 | 2023-07-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-35341 | Medium | 6.2 | 2023-07-11 | Microsoft DirectMusic Information Disclosure Vulnerability |
CVE-2023-35315 | High | 8.8 | 2023-07-11 | Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability |
CVE-2023-35312 | High | 7.8 | 2023-07-11 | Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability |
CVE-2023-32051 | High | 7.8 | 2023-07-11 | Raw Image Extension Remote Code Execution Vulnerability |
CVE-2023-22667 | High | 8.4 | 2023-07-04 | Memory Corruption in Audio while allocating the ion buffer during the music playback. |
CVE-2023-20756 | Medium | 6.7 | 2023-07-04 | In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-20755 | Medium | 6.7 | 2023-07-04 | In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-20693 | High | 7.5 | 2023-07-04 | In wlan firmware, there is possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privile… |
CVE-2023-20691 | High | 7.5 | 2023-07-04 | In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privilege… |
CVE-2023-20690 | High | 7.5 | 2023-07-04 | In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privilege… |
CVE-2023-20689 | High | 7.5 | 2023-07-04 | In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privilege… |
CVE-2023-25516 | High | 7.1 | 2023-07-04 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause an integer overflow, which may lea… |
CVE-2023-21193 | High | 7.5 | 2023-06-28 | In VideoFrame of VideoFrame.h, there is a possible abort due to an integer overflow. This could lead to remote information disclosure with no additional execut… |
CVE-2023-25004 | High | 7.8 | 2023-06-27 | A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lea… |
CVE-2022-48336 | Critical | 9.8 | 2023-06-26 | Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagParseAndStoreData integer overflow and resultant buffer overflow. |
CVE-2022-48335 | Critical | 9.8 | 2023-06-26 | Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagVerifyProvisioning integer overflow and resultant buffer overflow. |
CVE-2022-48334 | Critical | 9.8 | 2023-06-26 | Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys total_len+file_name_len integer overflow and resultant buffer overflow. |
CVE-2022-48333 | Critical | 9.8 | 2023-06-26 | Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys prefix_len+feature_name_len integer overflow and resultant buffer overflow. |
CVE-2022-48332 | Critical | 9.8 | 2023-06-26 | Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys file_name_len integer overflow and resultant buffer overflow. |
CVE-2022-48331 | Critical | 9.8 | 2023-06-26 | Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys feature_name_len integer overflow and resultant buffer overflow. |
CVE-2023-32434 | High | 7.8 | 2023-06-23 | An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, mac… |
CVE-2020-20335 | High | 7.5 | 2023-06-20 | Buffer Overflow vulnerability in Antirez Kilo before commit 7709a04ae8520c5b04d261616098cebf742f5a23 allows a remote attacker to cause a denial of service via… |
CVE-2023-28295 | High | 7.8 | 2023-06-17 | Microsoft Publisher Remote Code Execution Vulnerability |