CWE-190 · Integer Overflow or Wraparound (page 19)
Page 19 of 37 — CVEs classified under CWE-190, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-0919 | Medium | 5.0 | 2021-12-15 | In getService of IServiceManager.cpp, there is a possible unhandled exception due to an integer overflow. This could lead to local denial of service making the… |
CVE-2021-26109 | High | 8.1 | 2021-12-08 | An integer overflow or wraparound vulnerability in the memory allocator of SSLVPN in FortiOS before 7.0.1 may allow an unauthenticated attacker to corrupt cont… |
CVE-2021-42688 | High | 8.8 | 2021-12-07 | An Integer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22005B in the Accops HyWorks Windows Client… |
CVE-2021-42686 | High | 8.8 | 2021-12-07 | An Integer Overflow exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22001B in the Accops HyWorks Windows Client prior to v 3… |
CVE-2021-42685 | High | 8.8 | 2021-12-07 | An Integer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105 . The IOCTL Handler 0x22005B in the Accops HyWorks DVM Tools prior to… |
CVE-2021-42682 | High | 8.8 | 2021-12-07 | An Integer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105 .The IOCTL Handler 0x22001B allows local attackers to execute arbitrar… |
CVE-2021-43638 | High | 8.8 | 2021-12-07 | Amazon Amazon WorkSpaces agent is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers t… |
CVE-2021-43006 | High | 8.8 | 2021-12-07 | AmZetta Amzetta zPortal DVM Tools is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal DVM Tools <= v3.3.148.148 allow local attacker… |
CVE-2021-43003 | High | 8.8 | 2021-12-07 | Amzetta zPortal Windows zClient is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal Windows zClient <= v3.2.8180.148 allow local att… |
CVE-2021-42996 | High | 8.8 | 2021-12-07 | Donglify is affected by Integer Overflow. IOCTL Handler 0x22001B in the Donglify above 1.0.12309 below 1.7.14110 allow local attackers to execute arbitrary cod… |
CVE-2021-42993 | High | 8.8 | 2021-12-07 | FlexiHub For Windows is affected by Integer Overflow. IOCTL Handler 0x22001B in the FlexiHub For Windows above 2.0.4340 below 5.3.14268 allow local attackers t… |
CVE-2021-42987 | High | 8.8 | 2021-12-07 | Eltima USB Network Gate is affected by Integer Overflow. IOCTL Handler 0x22001B in the USB Network Gate above 7.0.1370 below 9.2.2420 allow local attackers to… |
CVE-2021-42986 | High | 8.8 | 2021-12-07 | NoMachine Enterprise Client is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Client above 4.0.346 and below 7.7.4 allow loca… |
CVE-2021-42979 | High | 8.8 | 2021-12-07 | NoMachine Cloud Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Cloud Server above 4.0.346 and below 7.7.4 allow local attacker… |
CVE-2021-42977 | High | 8.8 | 2021-12-07 | NoMachine Enterprise Desktop is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Desktop above 4.0.346 and below 7.7.4 allow lo… |
CVE-2021-42973 | High | 8.8 | 2021-12-07 | NoMachine Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and below 7.7.4 allow local attackers to execute… |
CVE-2021-37095 | Critical | 9.8 | 2021-12-07 | There is a Integer Overflow or Wraparound vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to remote denial of service… |
CVE-2021-37065 | Critical | 9.1 | 2021-12-07 | There is a Integer Overflow or Wraparound vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Confidentiality or Avail… |
CVE-2021-43784 | Medium | 6.0 | 2021-12-06 | runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc, netlink is used internally as a serialization syst… |
CVE-2021-26615 | High | 7.8 | 2021-11-26 | ARK library allows attackers to execute remote code via the parameter(path value) of Ark_NormalizeAndDupPAthNameW function because of an integer overflow. |
CVE-2020-7881 | High | 7.5 | 2021-11-26 | The vulnerability function is enabled when the streamer service related to the AfreecaTV communicated through web socket using 21201 port. A stack-based buffer… |
CVE-2021-0623 | Medium | 5.5 | 2021-11-18 | In asf extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional executi… |
CVE-2021-0621 | Medium | 5.5 | 2021-11-18 | In asf extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional executi… |
CVE-2021-33106 | High | 7.8 | 2021-11-17 | Integer overflow in the Safestring library maintained by Intel(R) may allow an authenticated user to potentially enable escalation of privilege via local acces… |
CVE-2021-26329 | Medium | 5.5 | 2021-11-16 | AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources. |
CVE-2021-43618 | High | 7.5 | 2021-11-15 | GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to… |
CVE-2021-1912 | High | 8.4 | 2021-11-12 | Possible integer overflow can occur due to improper length check while calculating count and grace period in Snapdragon Auto, Snapdragon Compute, Snapdragon Co… |
CVE-2021-41203 | High | 7.8 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions an attacker can trigger undefined behavior, integer overflows, segfaults and `… |
CVE-2021-41199 | Medium | 5.5 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions if `tf.image.resize` is called with a large input argument then the TensorFlow… |
CVE-2021-41198 | Medium | 5.5 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions if `tf.tile` is called with a large input argument then the TensorFlow process… |
CVE-2021-41197 | Medium | 5.5 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions TensorFlow allows tensor to have a large number of dimensions and each dimensi… |
CVE-2021-41195 | Medium | 5.5 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the implementation of `tf.math.segment_*` operations results in a `CHECK`-fail… |
CVE-2021-22455 | Medium | 5.5 | 2021-10-28 | A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause the memory which is no… |
CVE-2021-22451 | High | 7.8 | 2021-10-28 | A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause memory overwriting. |
CVE-2021-0630 | High | 7.5 | 2021-10-25 | In wifi driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privil… |
CVE-2021-0615 | Medium | 5.5 | 2021-10-25 | In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional executi… |
CVE-2021-0411 | Medium | 5.5 | 2021-10-25 | In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional executi… |
CVE-2021-1949 | High | 8.4 | 2021-10-20 | Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-1913 | High | 8.4 | 2021-10-20 | Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… |
CVE-2021-41991 | High | 7.5 | 2021-10-18 | The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the c… |
CVE-2021-41990 | High | 7.5 | 2021-10-18 | The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be trigge… |
CVE-2021-41345 | High | 7.8 | 2021-10-13 | Storage Spaces Controller Elevation of Privilege Vulnerability |
CVE-2021-29644 | High | 8.1 | 2021-10-12 | Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution vulnerability because of an Integer Overflow. An attacker with network… |
CVE-2021-27665 | High | 7.5 | 2021-10-11 | An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause denial-… |
CVE-2021-32765 | High | 8.8 | 2021-10-04 | Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously craft… |
CVE-2021-41099 | High | 7.5 | 2021-10-04 | Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the underlying string library can be used to corrupt the heap and… |
CVE-2021-32762 | High | 7.5 | 2021-10-04 | Redis is an open source, in-memory database that persists on disk. The redis-cli command line tool and redis-sentinel service may be vulnerable to integer over… |
CVE-2021-32687 | High | 7.5 | 2021-10-04 | Redis is an open source, in-memory database that persists on disk. An integer overflow bug affecting all versions of Redis can be exploited to corrupt the heap… |
CVE-2021-32628 | High | 7.5 | 2021-10-04 | Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the ziplist data structure used by all versions of Redis can be e… |
CVE-2021-32627 | High | 7.5 | 2021-10-04 | Redis is an open source, in-memory database that persists on disk. In affected versions an integer overflow bug in Redis can be exploited to corrupt the heap a… |
CVE-2021-21704 | Medium | 5.0 | 2021-10-04 | In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause… |
CVE-2021-41864 | High | 7.8 | 2021-10-02 | prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer ove… |
CVE-2020-18684 | Critical | 9.8 | 2021-09-30 | Floodlight through 1.2 has an integer overflow in checkFlow in StaticFlowEntryPusherResource.java via priority or port number. |
CVE-2021-0610 | High | 7.8 | 2021-09-27 | In memory management driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no additio… |
CVE-2021-38094 | High | 8.8 | 2021-09-20 | Integer Overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other… |
CVE-2021-38093 | High | 8.8 | 2021-09-20 | Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or othe… |
CVE-2021-38092 | High | 8.8 | 2021-09-20 | Integer Overflow vulnerability in function filter_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or oth… |
CVE-2021-38091 | High | 8.8 | 2021-09-20 | Integer Overflow vulnerability in function filter16_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or oth… |
CVE-2021-38090 | High | 8.8 | 2021-09-20 | Integer Overflow vulnerability in function filter16_roberts in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or o… |
CVE-2020-20898 | High | 8.8 | 2021-09-20 | Integer Overflow vulnerability in function filter16_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or o… |
CVE-2021-30260 | High | 8.4 | 2021-09-17 | Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuration command is rece… |
CVE-2021-40346 | High | 7.5 | 2021-09-08 | An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker… |
CVE-2021-30663 | High | 8.8 | 2021-09-08 | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, Safari 14.1.1, ma… |
CVE-2021-1878 | Medium | 6.5 | 2021-09-08 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update… |
CVE-2021-30760 | High | 7.8 | 2021-09-08 | An integer overflow was addressed through improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Upda… |
CVE-2021-39254 | High | 7.8 | 2021-09-07 | A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfs_attr_record_resize, in NTFS-3G < 20… |
CVE-2021-30354 | High | 8.6 | 2021-09-01 | Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::e… |
CVE-2021-36058 | Medium | 5.5 | 2021-09-01 | XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Integer Overflow vulnerability potentially resulting in application-level denial of service in t… |
CVE-2021-22684 | High | 7.5 | 2021-08-31 | Tizen RT RTOS version 3.0.GBB is vulnerable to integer wrap-around in functions_calloc and mm_zalloc. This improper memory assignment can lead to arbitrary mem… |
CVE-2021-21850 | High | 8.8 | 2021-08-25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A special… |
CVE-2021-30952 | High | 7.8 | 2021-08-24 | An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2… |
CVE-2021-30907 | High | 7.8 | 2021-08-24 | An integer overflow was addressed through improved input validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPa… |
CVE-2021-30860 | High | 7.8 | 2021-08-24 | An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big… |
CVE-2021-38714 | High | 8.8 | 2021-08-24 | In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution. The vulnerability is found in ssgLoadTGA() func… |
CVE-2021-0627 | Medium | 6.7 | 2021-08-18 | In OMA DRM, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with System execution privileges… |
CVE-2021-21852 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21851 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21837 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21832 | Critical | 9.8 | 2021-08-17 | A memory corruption vulnerability exists in the ISO Parsing functionality of Disc Soft Ltd Deamon Tools Pro 8.3.0.0767. A specially crafted malformed file can… |
CVE-2021-22156 | Critical | 9.0 | 2021-08-17 | An integer overflow vulnerability in the calloc() function of the C runtime library of affected versions of BlackBerry® QNX Software Development Platform (SDP)… |
CVE-2021-21859 | High | 8.8 | 2021-08-16 | An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. The str… |
CVE-2021-34536 | High | 7.8 | 2021-08-12 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
CVE-2021-38185 | High | 7.8 | 2021-08-08 | GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that triggers a… |
CVE-2021-38166 | High | 7.8 | 2021-08-07 | In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single buck… |
CVE-2021-34270 | High | 7.5 | 2021-08-03 | An integer overflow in the mintToken function of a smart contract implementation for Doftcoin Token, an Ethereum ERC20 token, allows the owner to cause unexpec… |
CVE-2021-33403 | High | 7.5 | 2021-08-03 | An integer overflow in the transfer function of a smart contract implementation for Lancer Token, an Ethereum ERC20 token, allows the owner to cause unexpected… |
CVE-2021-22422 | High | 7.8 | 2021-08-03 | A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause memory overwriting. |
CVE-2021-22418 | High | 7.8 | 2021-08-03 | A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause memory overwriting. |
CVE-2021-22413 | High | 7.5 | 2021-08-02 | There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset. |
CVE-2021-22412 | High | 7.5 | 2021-08-02 | There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause random kernel address access. |
CVE-2021-22388 | Critical | 9.8 | 2021-08-02 | There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed. |
CVE-2021-37600 | Medium | 5.5 | 2021-07-30 | An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads t… |
CVE-2021-31292 | High | 7.5 | 2021-07-26 | An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service (DOS) via cr… |
CVE-2021-25803 | High | 7.1 | 2021-07-26 | A buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read v… |
CVE-2021-24036 | Critical | 9.8 | 2021-07-23 | Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds write on the heap with the possibility of… |
CVE-2021-35942 | Critical | 9.1 | 2021-07-22 | The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an u… |
CVE-2021-32761 | High | 7.5 | 2021-07-21 | Redis is an in-memory database that persists on disk. A vulnerability involving out-of-bounds read and integer overflow to buffer overflow exists starting with… |
CVE-2020-19497 | High | 8.8 | 2021-07-21 | Integer overflow vulnerability in Mat_VarReadNextInfo5 in mat5.c in tbeu matio (aka MAT File I/O Library) 1.5.17, allows attackers to cause a Denial of Service… |
CVE-2020-19490 | Medium | 5.5 | 2021-07-21 | tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code. |
CVE-2021-33909 | High | 7.8 | 2021-07-20 | fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-o… |