CWE-190 · Integer Overflow or Wraparound (page 17)
Page 17 of 37 — CVEs classified under CWE-190, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-35289 | Critical | 9.8 | 2022-10-11 | A write-what-where condition in hermes caused by an integer overflow, prior to commit 5b6255ae049fa4641791e47fad994e8e8c4da374 allows attackers to potentially… |
CVE-2022-1718 | High | 7.5 | 2022-09-29 | The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Ser… |
CVE-2014-0147 | Medium | 6.2 | 2022-09-29 | Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash caused by… |
CVE-2021-3782 | Medium | 6.6 | 2022-09-23 | An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an i… |
CVE-2022-2566 | Critical | 9.0 | 2022-09-23 | A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in `build_open_gop_key_points()` goes through all entries in the loo… |
CVE-2022-35951 | High | 7.0 | 2022-09-23 | Redis is an in-memory database that persists on disk. Versions 7.0.0 and above, prior to 7.0.5 are vulnerable to an Integer Overflow. Executing an `XAUTOCLAIM`… |
CVE-2022-36934 | Critical | 9.8 | 2022-09-22 | An integer overflow in WhatsApp could result in remote code execution in an established video call. |
CVE-2022-36015 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `RangeSize` receives values that do not fit into an `int64_t`, it crashes. We have patched the… |
CVE-2022-35940 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The `RaggedRangOp` function takes an argument `limits` that is eventually used to construct a `Tens… |
CVE-2022-36402 | Medium | 6.3 | 2022-09-16 | An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri… |
CVE-2022-25656 | High | 8.4 | 2022-09-16 | Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when computing the payload size in Snapdrago… |
CVE-2022-22105 | Critical | 9.4 | 2022-09-16 | Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdr… |
CVE-2022-22089 | High | 8.4 | 2022-09-16 | Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables |
CVE-2022-22081 | High | 8.4 | 2022-09-16 | Memory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables |
CVE-2022-22074 | High | 8.4 | 2022-09-16 | Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sn… |
CVE-2021-0871 | High | 7.8 | 2022-09-13 | In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bound… |
CVE-2022-31789 | Critical | 9.8 | 2022-09-06 | An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and potentially execute arb… |
CVE-2022-26466 | Medium | 6.7 | 2022-09-06 | In audio ipi, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privil… |
CVE-2022-26459 | Medium | 4.4 | 2022-09-06 | In vow, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges nee… |
CVE-2022-26454 | Medium | 6.7 | 2022-09-06 | In teei, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2022-39842 | Medium | 6.1 | 2022-09-05 | An issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conflict of si… |
CVE-2022-24107 | High | 7.8 | 2022-08-30 | Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc. |
CVE-2022-24106 | High | 7.8 | 2022-08-30 | In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the image, leading to an un… |
CVE-2022-38784 | High | 7.8 | 2022-08-30 | Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a spec… |
CVE-2021-20224 | Medium | 5.5 | 2022-08-25 | An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c. Function calls to GetPixelIndex() could… |
CVE-2021-20304 | High | 7.5 | 2022-08-23 | A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undef… |
CVE-2022-38171 | High | 7.8 | 2022-08-22 | Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially craft… |
CVE-2022-36008 | High | 7.1 | 2022-08-19 | Frontier is Substrate's Ethereum compatibility layer. A security issue was discovered affecting parsing of the RPC result of the exit reason in case of EVM rev… |
CVE-2022-2831 | High | 7.5 | 2022-08-16 | A flaw was found in Blender 3.3.0. An interger overflow in source/blender/blendthumb/src/blendthumb_extract.cc may lead to program crash or memory corruption. |
CVE-2022-38216 | High | 7.5 | 2022-08-16 | An integer overflow exists in Mapbox's closed source gl-native library prior to version 10.6.1, which is bundled with multiple Mapbox products including open s… |
CVE-2022-20362 | High | 8.8 | 2022-08-12 | In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution over Bluetooth with no additional ex… |
CVE-2022-20283 | High | 8.8 | 2022-08-12 | In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution over Bluetooth with no additional ex… |
CVE-2022-20383 | High | 7.8 | 2022-08-11 | In AllocateInternalBuffers of g3aa_buffer_allocator.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation… |
CVE-2022-20367 | Medium | 6.7 | 2022-08-11 | In construct_transaction of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege… |
CVE-2022-20366 | Medium | 6.7 | 2022-08-11 | In ioctl_dpm_clk_update of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege w… |
CVE-2022-36125 | High | 7.5 | 2022-08-09 | It is possible to crash (panic) an application by providing a corrupted data to be read. This issue affects Rust applications using Apache Avro Rust SDK prior… |
CVE-2022-32543 | High | 7.8 | 2022-08-05 | An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. A specially-crafted OLE file can lead to a heap buffer overflow w… |
CVE-2022-29886 | High | 7.8 | 2022-08-05 | An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. A specially-crafted OLE file can lead to a heap buffer overflow… |
CVE-2022-33719 | High | 8.6 | 2022-08-05 | Improper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause integer overflow to heap overflow. |
CVE-2022-34612 | Medium | 5.5 | 2022-07-27 | Rizin v0.4.0 and below was discovered to contain an integer overflow via the function get_long_object(). This vulnerability allows attackers to cause a Denial… |
CVE-2021-33439 | Medium | 5.5 | 2022-07-26 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is Integer overflow in gc_compact_strings() in mjs.c. |
CVE-2021-46829 | High | 7.8 | 2022-07-24 | GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-… |
CVE-2022-2122 | High | 7.8 | 2022-07-19 | DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_inflate function which causes a segfault, or… |
CVE-2022-1925 | High | 7.8 | 2022-07-19 | DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data funct… |
CVE-2022-1924 | High | 7.8 | 2022-07-19 | DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo decompression function which causes a… |
CVE-2022-1923 | High | 7.8 | 2022-07-19 | DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes… |
CVE-2022-1922 | High | 7.8 | 2022-07-19 | DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gst_matroska_decompress_data function whi… |
CVE-2022-1921 | High | 7.8 | 2022-07-19 | Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi files. Potential for arbitrary code execu… |
CVE-2022-1920 | High | 7.8 | 2022-07-19 | Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential… |
CVE-2022-2454 | High | 7.8 | 2022-07-19 | Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV. |
CVE-2021-42755 | Medium | 4.3 | 2022-07-18 | An integer overflow / wraparound vulnerability [CWE-190] in FortiSwitch 7.0.2 and below, 6.4.9 and below, 6.2.x, 6.0.x; FortiRecorder 6.4.2 and below, 6.0.10 a… |
CVE-2022-32073 | Critical | 9.8 | 2022-07-13 | WolfSSH v1.4.7 was discovered to contain an integer overflow via the function wolfSSH_SFTP_RecvRMDIR. |
CVE-2022-31600 | High | 7.5 | 2022-07-04 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmmCore, where a user with high privileges can chain another vulnerability to this vulnerability, caus… |
CVE-2022-2285 | High | 7.8 | 2022-07-02 | Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0. |
CVE-2022-33068 | Medium | 5.5 | 2022-06-23 | An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors. |
CVE-2022-32546 | High | 7.8 | 2022-06-16 | A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrust… |
CVE-2022-32545 | High | 7.8 | 2022-06-16 | A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrust… |
CVE-2022-20178 | Medium | 6.7 | 2022-06-15 | In ioctl_dpm_qos_update and ioctl_event_control_set of (TBD), there is a possible out of bounds write due to an integer overflow. This could lead to local esca… |
CVE-2022-25651 | Critical | 9.8 | 2022-06-14 | Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Indust… |
CVE-2022-28615 | Critical | 9.1 | 2022-06-09 | Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in ap_strcmp_match() when provided with an extremely large… |
CVE-2022-28614 | Medium | 5.3 | 2022-06-09 | The ap_rwrite() function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause the server to reflect very large input us… |
CVE-2022-21762 | Medium | 4.4 | 2022-06-06 | In apusys driver, there is a possible system crash due to an integer overflow. This could lead to local denial of service with System execution privileges need… |
CVE-2022-21761 | Medium | 4.4 | 2022-06-06 | In apusys driver, there is a possible system crash due to an integer overflow. This could lead to local denial of service with System execution privileges need… |
CVE-2022-21760 | Medium | 4.4 | 2022-06-06 | In apusys driver, there is a possible system crash due to an integer overflow. This could lead to local denial of service with System execution privileges need… |
CVE-2022-31005 | High | 7.5 | 2022-05-31 | Vapor is an HTTP web framework for Swift. Users of Vapor prior to version 4.60.3 with FileMiddleware enabled are vulnerable to an integer overflow vulnerabilit… |
CVE-2022-1926 | Medium | 4.9 | 2022-05-31 | Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.3. |
CVE-2022-26775 | Critical | 9.8 | 2022-05-26 | An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. An attacker ma… |
CVE-2022-26711 | Critical | 9.8 | 2022-05-26 | An integer overflow issue was addressed with improved input validation. This issue is fixed in tvOS 15.5, iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5… |
CVE-2022-29358 | Medium | 5.5 | 2022-05-25 | epub2txt2 v2.04 was discovered to contain an integer overflow via the function bug in _parse_special_tag at sxmlc.c. This vulnerability allows attackers to cau… |
CVE-2022-29219 | High | 7.5 | 2022-05-24 | Lodestar is a TypeScript implementation of the Ethereum Consensus specification. Prior to version 0.36.0, there is a possible consensus split given maliciously… |
CVE-2022-31264 | High | 7.5 | 2022-05-21 | Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. |
CVE-2022-29203 | Medium | 5.5 | 2022-05-20 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.SpaceToBatchND`… |
CVE-2022-29030 | Medium | 5.5 | 2022-05-20 | A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V1… |
CVE-2022-1754 | Medium | 6.5 | 2022-05-20 | Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.2. |
CVE-2022-22976 | Medium | 5.3 | 2022-05-19 | Spring Security versions 5.5.x prior to 5.5.7, 5.6.x prior to 5.6.4, and earlier unsupported versions contain an integer overflow vulnerability. When using the… |
CVE-2022-1116 | High | 7.8 | 2022-05-17 | Integer Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to cause memory corruption and escalate privileges to root. This… |
CVE-2022-1728 | Medium | 6.5 | 2022-05-16 | Allowing long password leads to denial of service in polonel/trudesk in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability can be abused by d… |
CVE-2022-28937 | High | 7.5 | 2022-05-15 | FISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node, via an invalid proposal with an invalid header, will cause normal nodes… |
CVE-2022-28936 | High | 7.5 | 2022-05-15 | FISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node can trigger an integer overflow and cause a Denial of Service (DoS) via… |
CVE-2022-1699 | High | 7.5 | 2022-05-12 | Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which ge… |
CVE-2022-27114 | Medium | 5.5 | 2022-05-09 | There is a vulnerability in htmldoc 1.9.16. In image_load_jpeg function image.cxx when it calls malloc,'img->width' and 'img->height' they are large enough to… |
CVE-2022-26073 | Medium | 6.5 | 2022-05-05 | A denial of service vulnerability exists in the libxm_av.so DemuxCmdInBuffer functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted set of networ… |
CVE-2022-28705 | High | 7.5 | 2022-05-05 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, on p… |
CVE-2022-28471 | Medium | 6.5 | 2022-05-05 | In ffjpeg (commit hash: caade60), the function bmp_load() in bmp.c contains an integer overflow vulnerability, which eventually results in the heap overflow in… |
CVE-2022-21743 | High | 7.8 | 2022-05-03 | In ion, there is a possible use after free due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges… |
CVE-2022-20107 | Medium | 4.4 | 2022-05-03 | In subtitle service, there is a possible application crash due to an integer overflow. This could lead to local denial of service with System execution privile… |
CVE-2021-27439 | High | 7.3 | 2022-05-03 | TencentOS-tiny version 3.1.0 is vulnerable to integer wrap-around in function 'tos_mmheap_alloc incorrect calculation of effective memory allocation size. This… |
CVE-2021-27435 | High | 7.3 | 2022-05-03 | ARM mbed product Version 6.3.0 is vulnerable to integer wrap-around in malloc_wrapper function, which can lead to arbitrary memory allocation, resulting in une… |
CVE-2021-27433 | High | 7.3 | 2022-05-03 | ARM mbed-ualloc memory library version 1.3.0 is vulnerable to integer wrap-around in function mbed_krbs, which can lead to arbitrary memory allocation, resulti… |
CVE-2021-27431 | High | 7.3 | 2022-05-03 | ARM CMSIS RTOS2 versions prior to 2.1.3 are vulnerable to integer wrap-around inosRtxMemoryAlloc (local malloc equivalent) function, which can lead to arbitrar… |
CVE-2021-27427 | High | 7.3 | 2022-05-03 | RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead to arbitrary memory allocation, resulti… |
CVE-2021-27425 | High | 7.3 | 2022-05-03 | Cesanta Software Mongoose-OS v2.17.0 is vulnerable to integer wrap-around in function mm_malloc. This improper memory assignment can lead to arbitrary memory a… |
CVE-2021-27421 | High | 7.3 | 2022-05-03 | NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDK_Malloc function, which could allow to access memory locations outside the… |
CVE-2021-27419 | High | 7.3 | 2022-05-03 | uClibc-ng versions prior to 1.0.37 are vulnerable to integer wrap-around in functions malloc-simple. This improper memory assignment can lead to arbitrary memo… |
CVE-2021-27417 | Medium | 4.6 | 2022-05-03 | eCosCentric eCosPro RTOS Versions 2.0.1 through 4.5.3 are vulnerable to integer wraparound in function calloc (an implementation of malloc). The unverified mem… |
CVE-2021-27411 | Medium | 6.5 | 2022-05-03 | Micrium OS Versions 5.10.1 and prior are vulnerable to integer wrap-around in functions Mem_DynPoolCreate, Mem_DynPoolCreateHW and Mem_PoolCreate. This unverif… |
CVE-2021-22680 | High | 7.3 | 2022-05-03 | NXP MQX Versions 5.1 and prior are vulnerable to integer overflow in mem_alloc, _lwmem_alloc and _partition functions. This unverified memory assignment can le… |
CVE-2021-22556 | Medium | 5.3 | 2022-05-03 | The Security Team discovered an integer overflow bug that allows an attacker with code execution to issue memory cache invalidation operations on pages that th… |
CVE-2022-29824 | Medium | 6.5 | 2022-05-03 | In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in ou… |
CVE-2022-1475 | Medium | 5.5 | 2022-05-02 | An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a spe… |