CWE-190 · Integer Overflow or Wraparound (page 15)
Page 15 of 37 — CVEs classified under CWE-190, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-36495 | Critical | 9.8 | 2023-07-28 | An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.6, macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, tvOS… |
CVE-2022-41409 | High | 7.5 | 2023-07-18 | Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input. |
CVE-2022-33065 | High | 7.8 | 2023-07-18 | Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an… |
CVE-2023-38403 | High | 7.5 | 2023-07-17 | iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field. |
CVE-2023-21241 | High | 7.8 | 2023-07-13 | In rw_i93_send_to_upper of rw_i93.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with… |
CVE-2023-35364 | High | 8.8 | 2023-07-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-35341 | Medium | 6.2 | 2023-07-11 | Microsoft DirectMusic Information Disclosure Vulnerability |
CVE-2023-35315 | High | 8.8 | 2023-07-11 | Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability |
CVE-2023-35312 | High | 7.8 | 2023-07-11 | Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability |
CVE-2023-32051 | High | 7.8 | 2023-07-11 | Raw Image Extension Remote Code Execution Vulnerability |
CVE-2023-22667 | High | 8.4 | 2023-07-04 | Memory Corruption in Audio while allocating the ion buffer during the music playback. |
CVE-2023-20756 | Medium | 6.7 | 2023-07-04 | In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-20755 | Medium | 6.7 | 2023-07-04 | In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-20693 | High | 7.5 | 2023-07-04 | In wlan firmware, there is possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privile… |
CVE-2023-20691 | High | 7.5 | 2023-07-04 | In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privilege… |
CVE-2023-20690 | High | 7.5 | 2023-07-04 | In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privilege… |
CVE-2023-20689 | High | 7.5 | 2023-07-04 | In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privilege… |
CVE-2023-25516 | High | 7.1 | 2023-07-04 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause an integer overflow, which may lea… |
CVE-2023-21193 | High | 7.5 | 2023-06-28 | In VideoFrame of VideoFrame.h, there is a possible abort due to an integer overflow. This could lead to remote information disclosure with no additional execut… |
CVE-2023-25004 | High | 7.8 | 2023-06-27 | A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lea… |
CVE-2022-48336 | Critical | 9.8 | 2023-06-26 | Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagParseAndStoreData integer overflow and resultant buffer overflow. |
CVE-2022-48335 | Critical | 9.8 | 2023-06-26 | Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagVerifyProvisioning integer overflow and resultant buffer overflow. |
CVE-2022-48334 | Critical | 9.8 | 2023-06-26 | Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys total_len+file_name_len integer overflow and resultant buffer overflow. |
CVE-2022-48333 | Critical | 9.8 | 2023-06-26 | Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys prefix_len+feature_name_len integer overflow and resultant buffer overflow. |
CVE-2022-48332 | Critical | 9.8 | 2023-06-26 | Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys file_name_len integer overflow and resultant buffer overflow. |
CVE-2022-48331 | Critical | 9.8 | 2023-06-26 | Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys feature_name_len integer overflow and resultant buffer overflow. |
CVE-2023-32434 | High | 7.8 | 2023-06-23 | An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, mac… |
CVE-2020-20335 | High | 7.5 | 2023-06-20 | Buffer Overflow vulnerability in Antirez Kilo before commit 7709a04ae8520c5b04d261616098cebf742f5a23 allows a remote attacker to cause a denial of service via… |
CVE-2023-28295 | High | 7.8 | 2023-06-17 | Microsoft Publisher Remote Code Execution Vulnerability |
CVE-2021-0701 | Critical | 9.8 | 2023-06-15 | In PVRSRVBridgeSyncPrimOpCreate of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds he… |
CVE-2023-34454 | Medium | 5.9 | 2023-06-15 | snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1, causing… |
CVE-2023-34453 | Medium | 5.9 | 2023-06-15 | snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1, causing… |
CVE-2023-29369 | Medium | 6.5 | 2023-06-14 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-29364 | High | 7.0 | 2023-06-14 | Windows Authentication Elevation of Privilege Vulnerability |
CVE-2023-33864 | Critical | 9.8 | 2023-06-07 | StreamReader::ReadFromExternal in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. It uses uint32_t(m_BufferSize-m_InputSize)… |
CVE-2023-33863 | Critical | 9.8 | 2023-06-07 | SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-extended to 0xffffffffffffffff (SIZE_MA… |
CVE-2023-2603 | High | 7.8 | 2023-06-06 | A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4Gi… |
CVE-2023-34151 | Medium | 5.5 | 2023-05-30 | A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting double to size_t in svg, mvg and other coders (recurr… |
CVE-2023-32307 | High | 7.5 | 2023-05-26 | Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. Referring to [GHSA-8599-x7rq-fr54](https://github.com/freesw… |
CVE-2022-48480 | High | 7.5 | 2023-05-26 | Integer overflow vulnerability in some phones. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-23298 | Critical | 9.8 | 2023-05-23 | The `Toybox.Graphics.BufferedBitmap.initialize` API method in CIQ API version 2.3.0 through 4.1.7 does not validate its parameters, which can result in integer… |
CVE-2023-33204 | High | 7.8 | 2023-05-18 | sysstat through 12.7.2 allows a multiplication integer overflow in check_overflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-202… |
CVE-2023-2512 | Medium | 6.5 | 2023-05-12 | Prior to version v1.20230419.0, the FormData API implementation was subject to an integer overflow. If a FormData instance contained more than 2^31 elements, t… |
CVE-2023-32058 | High | 7.5 | 2023-05-11 | Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, due to missing overflow check for loop variables, by assi… |
CVE-2023-22443 | Medium | 6.0 | 2023-05-10 | Integer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable denial of service via local access. |
CVE-2023-2610 | High | 7.8 | 2023-05-09 | Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532. |
CVE-2023-24949 | High | 7.8 | 2023-05-09 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-24945 | Medium | 5.5 | 2023-05-09 | Windows iSCSI Target Service Information Disclosure Vulnerability |
CVE-2022-47489 | Medium | 4.4 | 2023-05-09 | In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2023-27937 | High | 7.8 | 2023-05-08 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, ma… |
CVE-2022-46720 | High | 8.6 | 2023-05-08 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. An app may be able to br… |
CVE-2023-27354 | Medium | 6.5 | 2023-04-20 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220. Authenticatio… |
CVE-2021-0885 | High | 7.8 | 2023-04-19 | In PVRSRVBridgeSyncPrimOpTake of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap… |
CVE-2021-0884 | High | 7.8 | 2023-04-19 | In PVRSRVBridgePhysmemImportSparseDmaBuf of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-… |
CVE-2021-0883 | High | 7.8 | 2023-04-19 | In PVRSRVBridgeCacheOpQueue of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap a… |
CVE-2021-0882 | High | 7.8 | 2023-04-19 | In PVRSRVBridgeRGXKickSync of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap ac… |
CVE-2021-0881 | High | 7.8 | 2023-04-19 | In PVRSRVBridgeRGXKickCDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap acc… |
CVE-2021-0880 | High | 7.8 | 2023-04-19 | In PVRSRVBridgeRGXKickTA3D of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap ac… |
CVE-2021-0879 | High | 7.8 | 2023-04-19 | In PVRSRVBridgeRGXTDMSubmitTransfer of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bound… |
CVE-2021-0878 | High | 7.8 | 2023-04-19 | In PVRSRVBridgeServerSyncGetStatus of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds… |
CVE-2021-0876 | High | 7.8 | 2023-04-19 | In PVRSRVBridgePhysmemNewRamBackedLockedPMR of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-… |
CVE-2021-0875 | High | 7.8 | 2023-04-19 | In PVRSRVBridgeChangeSparseMem of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds hea… |
CVE-2021-0874 | High | 7.8 | 2023-04-19 | In PVRSRVBridgeDevicememHistorySparseChange of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-… |
CVE-2021-0873 | High | 7.8 | 2023-04-19 | In PVRSRVBridgeRGXKickRS of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap acce… |
CVE-2021-0872 | High | 7.8 | 2023-04-19 | In PVRSRVBridgeRGXKickVRDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap ac… |
CVE-2023-1900 | High | 7.8 | 2023-04-19 | A vulnerability within the Avira network protection feature allowed an attacker with local execution rights to cause an overflow. This could corrupt the data o… |
CVE-2023-30463 | High | 7.5 | 2023-04-19 | Altran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because of an integer overflow in pico_ipv6_alloc when processing larg… |
CVE-2023-2136 | Critical | 9.6 | 2023-04-19 | Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a s… |
CVE-2021-33797 | Critical | 9.8 | 2023-04-17 | Buffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. An integer overflow happens when js_strtod() reads in floating point exponent, which le… |
CVE-2023-27913 | High | 7.8 | 2023-04-14 | A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to cause an Integer Overflow. A malicious actor can leverage this vulner… |
CVE-2022-48468 | Medium | 5.5 | 2023-04-13 | protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member. |
CVE-2023-21630 | High | 8.4 | 2023-04-13 | Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal. |
CVE-2022-40532 | High | 8.4 | 2023-04-13 | Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target. |
CVE-2022-33296 | Medium | 5.9 | 2023-04-13 | Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message. |
CVE-2022-33282 | High | 8.4 | 2023-04-13 | Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback. |
CVE-2022-33269 | Critical | 9.3 | 2023-04-13 | Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment. |
CVE-2023-28277 | Medium | 4.9 | 2023-04-11 | Windows DNS Server Information Disclosure Vulnerability |
CVE-2023-28248 | High | 7.8 | 2023-04-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-28237 | High | 7.8 | 2023-04-11 | Windows Kernel Remote Code Execution Vulnerability |
CVE-2023-26065 | Critical | 9.8 | 2023-04-10 | Certain Lexmark devices through 2023-02-19 have an Integer Overflow. |
CVE-2023-20682 | Medium | 6.7 | 2023-04-06 | In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges… |
CVE-2023-20663 | Medium | 6.7 | 2023-04-06 | In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges… |
CVE-2023-20662 | Medium | 6.7 | 2023-04-06 | In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges… |
CVE-2023-20661 | Medium | 6.7 | 2023-04-06 | In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges… |
CVE-2023-20660 | Medium | 4.4 | 2023-04-06 | In wlan, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges ne… |
CVE-2023-24537 | High | 7.5 | 2023-04-06 | Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer ov… |
CVE-2023-28613 | Medium | 6.8 | 2023-04-04 | An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflo… |
CVE-2023-28501 | Critical | 9.8 | 2023-03-29 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a heap-based buffe… |
CVE-2022-43608 | High | 8.8 | 2023-03-29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.03 printers. Authentic… |
CVE-2022-27641 | High | 8.8 | 2023-03-29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authenti… |
CVE-2023-25903 | High | 7.8 | 2023-03-28 | Adobe Dimension versions 3.4.7 (and earlier) is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in th… |
CVE-2023-0179 | High | 7.8 | 2023-03-27 | A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses… |
CVE-2023-25667 | Medium | 6.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, integer overflow occurs when `2^31 <= num_frames * height * wi… |
CVE-2023-25662 | High | 7.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 are vulnerable to integer overflow in EditDistance. A fix is in… |
CVE-2023-21065 | Medium | 6.7 | 2023-03-24 | In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System exec… |
CVE-2022-20532 | Critical | 9.8 | 2023-03-24 | In parseTrackFragmentRun() of MPEG4Extractor.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote escalation of pr… |
CVE-2023-28097 | High | 7.5 | 2023-03-15 | OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.9 and 3.2.6, a malformed SIP message containing a large _Content-L… |
CVE-2023-24909 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24908 | High | 8.1 | 2023-03-14 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2023-24906 | Medium | 6.5 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |