CWE-190 · Integer Overflow or Wraparound (page 13)
Page 13 of 34 — CVEs classified under CWE-190, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-0701 | Critical | 9.8 | 2023-06-15 | In PVRSRVBridgeSyncPrimOpCreate of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds he… |
CVE-2023-34454 | Medium | 5.9 | 2023-06-15 | snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1, causing… |
CVE-2023-34453 | Medium | 5.9 | 2023-06-15 | snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1, causing… |
CVE-2023-29369 | Medium | 6.5 | 2023-06-14 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-29364 | High | 7.0 | 2023-06-14 | Windows Authentication Elevation of Privilege Vulnerability |
CVE-2023-33864 | Critical | 9.8 | 2023-06-07 | StreamReader::ReadFromExternal in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. It uses uint32_t(m_BufferSize-m_InputSize)… |
CVE-2023-33863 | Critical | 9.8 | 2023-06-07 | SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-extended to 0xffffffffffffffff (SIZE_MA… |
CVE-2023-2603 | High | 7.8 | 2023-06-06 | A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4Gi… |
CVE-2023-34151 | Medium | 5.5 | 2023-05-30 | A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting double to size_t in svg, mvg and other coders (recurr… |
CVE-2023-32307 | High | 7.5 | 2023-05-26 | Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. Referring to [GHSA-8599-x7rq-fr54](https://github.com/freesw… |
CVE-2022-48480 | High | 7.5 | 2023-05-26 | Integer overflow vulnerability in some phones. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-23298 | Critical | 9.8 | 2023-05-23 | The `Toybox.Graphics.BufferedBitmap.initialize` API method in CIQ API version 2.3.0 through 4.1.7 does not validate its parameters, which can result in integer… |
CVE-2023-33204 | High | 7.8 | 2023-05-18 | sysstat through 12.7.2 allows a multiplication integer overflow in check_overflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-202… |
CVE-2023-2512 | Medium | 6.5 | 2023-05-12 | Prior to version v1.20230419.0, the FormData API implementation was subject to an integer overflow. If a FormData instance contained more than 2^31 elements, t… |
CVE-2023-32058 | High | 7.5 | 2023-05-11 | Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, due to missing overflow check for loop variables, by assi… |
CVE-2023-22443 | Medium | 6.0 | 2023-05-10 | Integer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable denial of service via local access. |
CVE-2023-2610 | High | 7.8 | 2023-05-09 | Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532. |
CVE-2023-24949 | High | 7.8 | 2023-05-09 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-24945 | Medium | 5.5 | 2023-05-09 | Windows iSCSI Target Service Information Disclosure Vulnerability |
CVE-2022-47489 | Medium | 4.4 | 2023-05-09 | In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2023-27937 | High | 7.8 | 2023-05-08 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, ma… |
CVE-2022-46720 | High | 8.6 | 2023-05-08 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. An app may be able to br… |
CVE-2023-27354 | Medium | 6.5 | 2023-04-20 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220. Authenticatio… |
CVE-2021-0885 | High | 7.8 | 2023-04-19 | In PVRSRVBridgeSyncPrimOpTake of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap… |
CVE-2021-0884 | High | 7.8 | 2023-04-19 | In PVRSRVBridgePhysmemImportSparseDmaBuf of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-… |
CVE-2021-0883 | High | 7.8 | 2023-04-19 | In PVRSRVBridgeCacheOpQueue of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap a… |
CVE-2021-0882 | High | 7.8 | 2023-04-19 | In PVRSRVBridgeRGXKickSync of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap ac… |
CVE-2021-0881 | High | 7.8 | 2023-04-19 | In PVRSRVBridgeRGXKickCDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap acc… |
CVE-2021-0880 | High | 7.8 | 2023-04-19 | In PVRSRVBridgeRGXKickTA3D of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap ac… |
CVE-2021-0879 | High | 7.8 | 2023-04-19 | In PVRSRVBridgeRGXTDMSubmitTransfer of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bound… |
CVE-2021-0878 | High | 7.8 | 2023-04-19 | In PVRSRVBridgeServerSyncGetStatus of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds… |
CVE-2021-0876 | High | 7.8 | 2023-04-19 | In PVRSRVBridgePhysmemNewRamBackedLockedPMR of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-… |
CVE-2021-0875 | High | 7.8 | 2023-04-19 | In PVRSRVBridgeChangeSparseMem of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds hea… |
CVE-2021-0874 | High | 7.8 | 2023-04-19 | In PVRSRVBridgeDevicememHistorySparseChange of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-… |
CVE-2021-0873 | High | 7.8 | 2023-04-19 | In PVRSRVBridgeRGXKickRS of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap acce… |
CVE-2021-0872 | High | 7.8 | 2023-04-19 | In PVRSRVBridgeRGXKickVRDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap ac… |
CVE-2023-1900 | High | 7.8 | 2023-04-19 | A vulnerability within the Avira network protection feature allowed an attacker with local execution rights to cause an overflow. This could corrupt the data o… |
CVE-2023-30463 | High | 7.5 | 2023-04-19 | Altran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because of an integer overflow in pico_ipv6_alloc when processing larg… |
CVE-2023-2136 | Critical | 9.6 | 2023-04-19 | Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a s… |
CVE-2021-33797 | Critical | 9.8 | 2023-04-17 | Buffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. An integer overflow happens when js_strtod() reads in floating point exponent, which le… |
CVE-2023-27913 | High | 7.8 | 2023-04-14 | A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to cause an Integer Overflow. A malicious actor can leverage this vulner… |
CVE-2022-48468 | Medium | 5.5 | 2023-04-13 | protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member. |
CVE-2023-21630 | High | 8.4 | 2023-04-13 | Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal. |
CVE-2022-40532 | High | 8.4 | 2023-04-13 | Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target. |
CVE-2022-33296 | Medium | 5.9 | 2023-04-13 | Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message. |
CVE-2022-33282 | High | 8.4 | 2023-04-13 | Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback. |
CVE-2022-33269 | Critical | 9.3 | 2023-04-13 | Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment. |
CVE-2023-28277 | Medium | 4.9 | 2023-04-11 | Windows DNS Server Information Disclosure Vulnerability |
CVE-2023-28248 | High | 7.8 | 2023-04-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-28237 | High | 7.8 | 2023-04-11 | Windows Kernel Remote Code Execution Vulnerability |
CVE-2023-26065 | Critical | 9.8 | 2023-04-10 | Certain Lexmark devices through 2023-02-19 have an Integer Overflow. |
CVE-2023-20682 | Medium | 6.7 | 2023-04-06 | In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges… |
CVE-2023-20663 | Medium | 6.7 | 2023-04-06 | In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges… |
CVE-2023-20662 | Medium | 6.7 | 2023-04-06 | In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges… |
CVE-2023-20661 | Medium | 6.7 | 2023-04-06 | In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges… |
CVE-2023-20660 | Medium | 4.4 | 2023-04-06 | In wlan, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges ne… |
CVE-2023-24537 | High | 7.5 | 2023-04-06 | Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer ov… |
CVE-2023-28613 | Medium | 6.8 | 2023-04-04 | An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflo… |
CVE-2023-28501 | Critical | 9.8 | 2023-03-29 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a heap-based buffe… |
CVE-2022-43608 | High | 8.8 | 2023-03-29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.03 printers. Authentic… |
CVE-2022-27641 | High | 8.8 | 2023-03-29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authenti… |
CVE-2023-25903 | High | 7.8 | 2023-03-28 | Adobe Dimension versions 3.4.7 (and earlier) is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in th… |
CVE-2023-0179 | High | 7.8 | 2023-03-27 | A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses… |
CVE-2023-25667 | Medium | 6.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, integer overflow occurs when `2^31 <= num_frames * height * wi… |
CVE-2023-25662 | High | 7.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 are vulnerable to integer overflow in EditDistance. A fix is in… |
CVE-2023-21065 | Medium | 6.7 | 2023-03-24 | In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System exec… |
CVE-2022-20532 | Critical | 9.8 | 2023-03-24 | In parseTrackFragmentRun() of MPEG4Extractor.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote escalation of pr… |
CVE-2023-28097 | High | 7.5 | 2023-03-15 | OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.9 and 3.2.6, a malformed SIP message containing a large _Content-L… |
CVE-2023-24909 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24908 | High | 8.1 | 2023-03-14 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2023-24906 | Medium | 6.5 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-24871 | High | 8.8 | 2023-03-14 | Windows Bluetooth Service Remote Code Execution Vulnerability |
CVE-2023-24869 | High | 8.1 | 2023-03-14 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2023-24863 | Medium | 6.5 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-23417 | High | 7.8 | 2023-03-14 | Windows Partition Management Driver Elevation of Privilege Vulnerability |
CVE-2023-23410 | High | 7.8 | 2023-03-14 | Windows HTTP.sys Elevation of Privilege Vulnerability |
CVE-2023-23405 | High | 8.1 | 2023-03-14 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2023-23385 | High | 7.0 | 2023-03-14 | Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability |
CVE-2023-24180 | Medium | 6.5 | 2023-03-14 | Libelfin v0.3 was discovered to contain an integer overflow in the load function at elf/mmap_loader.cc. This vulnerability allows attackers to cause a Denial o… |
CVE-2022-47454 | Medium | 5.5 | 2023-03-10 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-40530 | High | 8.4 | 2023-03-10 | Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase. |
CVE-2022-25705 | High | 7.8 | 2023-03-10 | Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response |
CVE-2023-22436 | High | 7.8 | 2023-03-10 | The kernel subsystem function check_permission_for_set_tokenid within OpenHarmony-v3.1.5 and prior versions has an UAF vulnerability which local attackers ca… |
CVE-2023-25155 | Medium | 5.5 | 2023-03-02 | Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted `SRANDMEMBER`, `ZRANDMEMBER`, and `HRANDFIELD` commands can… |
CVE-2021-4327 | Medium | 5.5 | 2023-03-01 | A vulnerability was found in SerenityOS. It has been rated as critical. Affected by this issue is the function initialize_typed_array_from_array_buffer in the… |
CVE-2023-0754 | Critical | 9.8 | 2023-02-23 | The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute arbitrary c… |
CVE-2023-0933 | High | 8.8 | 2023-02-22 | Integer overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chro… |
CVE-2023-26242 | High | 7.8 | 2023-02-21 | afu_mmio_region_get_by_offset in drivers/fpga/dfl-afu-region.c in the Linux kernel through 6.1.12 has an integer overflow. |
CVE-2022-34843 | Medium | 4.8 | 2023-02-16 | Integer overflow in the Intel(R) Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation o… |
CVE-2023-23462 | Critical | 9.8 | 2023-02-15 | Libpeconv – integer overflow, before commit 75b1565 (30/11/2022). |
CVE-2023-21823 | High | 7.8 | 2023-02-14 | Windows Graphics Component Remote Code Execution Vulnerability |
CVE-2023-21803 | Critical | 9.8 | 2023-02-14 | Windows iSCSI Discovery Service Remote Code Execution Vulnerability |
CVE-2023-21802 | High | 7.8 | 2023-02-14 | Windows Media Remote Code Execution Vulnerability |
CVE-2023-21797 | High | 8.8 | 2023-02-14 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2023-21716 | Critical | 9.8 | 2023-02-14 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2023-21704 | High | 7.8 | 2023-02-14 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-21686 | High | 8.8 | 2023-02-14 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2022-47451 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47322 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-38680 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |