CWE-190 · Integer Overflow or Wraparound (page 24)
Page 24 of 34 — CVEs classified under CWE-190, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-17569 | Critical | 9.8 | 2018-09-26 | network/nw_buf.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption. |
CVE-2018-17568 | Critical | 9.8 | 2018-09-26 | utils/ut_rpc.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption. |
CVE-2018-14634 | High | 7.8 | 2018-09-25 | An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged)… |
CVE-2018-17050 | High | 7.5 | 2018-09-21 | The mintToken function of a smart contract implementation for PolyAi (AI), an Ethereum token, has an integer overflow that allows the owner of the contract to… |
CVE-2018-12511 | High | 7.5 | 2018-09-21 | In the mintToken function of a smart contract implementation for Substratum (SUB), an Ethereum ERC20 token, the administrator can control mintedAmount, leverag… |
CVE-2018-11292 | High | 7.8 | 2018-09-20 | In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 410/1… |
CVE-2018-11894 | High | 7.8 | 2018-09-19 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing preferred network offload scan res… |
CVE-2018-11886 | High | 7.8 | 2018-09-19 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check while calculating the MPDU data lengt… |
CVE-2018-11826 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on integer overflow while calculating… |
CVE-2017-15828 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while accessing the keystore in LK, an integer over… |
CVE-2017-15818 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while loading a user application in qseecom, an int… |
CVE-2017-2777 | High | 8.8 | 2018-09-17 | An exploitable heap overflow vulnerability exists in the ipStringCreate function of Iceni Argus Version 6.6.05. A specially crafted pdf file can cause an integ… |
CVE-2018-17100 | High | 8.8 | 2018-09-16 | An issue was discovered in LibTIFF 4.0.9. There is a int32 overflow in multiply_ms in tools/ppm2tiff.c, which can cause a denial of service (crash) or possibly… |
CVE-2018-17088 | High | 7.8 | 2018-09-16 | The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via… |
CVE-2018-8441 | High | 7.8 | 2018-09-13 | An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka "Windows Subsystem for Linux Elevation of Privile… |
CVE-2018-10893 | High | 7.6 | 2018-09-11 | Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames. A malicious server could cause the cli… |
CVE-2018-14618 | High | 7.5 | 2018-09-05 | curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hash multiplies the le… |
CVE-2018-10911 | High | 7.5 | 2018-09-04 | A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values. An attacker could use this flaw to read memory fr… |
CVE-2018-16435 | Medium | 5.5 | 2018-09-04 | Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overf… |
CVE-2018-11054 | High | 7.5 | 2018-08-31 | RSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A remote attacker could use maliciously constructed ASN.1 data to pot… |
CVE-2017-15422 | Medium | 6.5 | 2018-08-28 | Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63… |
CVE-2018-1000224 | High | 7.5 | 2018-08-20 | Godot Engine version All versions prior to 2.1.5, all 3.0 versions prior to 3.0.6. contains a Signed/unsigned comparison, wrong buffer size chackes, integer ov… |
CVE-2018-15560 | High | 7.5 | 2018-08-20 | PyCryptodome before 3.6.6 has an integer overflow in the data_len variable in AESNI.c, related to the AESNI_encrypt and AESNI_decrypt functions, leading to the… |
CVE-2018-11687 | High | 7.5 | 2018-08-15 | An integer overflow in the distributeBTR function of a smart contract implementation for Bitcoin Red (BTCR), an Ethereum ERC20 token, allows the owner to accom… |
CVE-2018-11561 | High | 7.5 | 2018-08-08 | An integer overflow in the unprotected distributeToken function of a smart contract implementation for EETHER (EETHER), an Ethereum ERC20 token, will lead to a… |
CVE-2018-14938 | Critical | 9.1 | 2018-08-05 | An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handle_prism during caplen proces… |
CVE-2018-14576 | High | 7.5 | 2018-08-03 | The mintTokens function of a smart contract implementation for SunContract, an Ethereum token, has an integer overflow via the _amount variable. |
CVE-2018-14883 | High | 7.5 | 2018-08-03 | An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integer Overflow leads to a heap-based buffe… |
CVE-2018-10921 | Medium | 4.3 | 2018-08-02 | Certain input files may trigger an integer overflow in ttembed input file processing. This overflow could potentially lead to corruption of the input file due… |
CVE-2017-9120 | Critical | 9.8 | 2018-08-02 | PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact vi… |
CVE-2016-9583 | Medium | 5.5 | 2018-08-01 | An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input. |
CVE-2016-9580 | Low | 3.3 | 2018-08-01 | An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow. |
CVE-2016-8620 | Medium | 6.5 | 2018-08-01 | The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read via user controlled input. |
CVE-2016-8622 | Low | 3.7 | 2018-07-31 | The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would be made to allocate a… |
CVE-2018-14295 | High | 8.8 | 2018-07-31 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF Phantom PDF 9.1.5096. User interaction is… |
CVE-2017-7482 | High | 7.8 | 2018-07-30 | In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the s… |
CVE-2018-14444 | High | 7.5 | 2018-07-20 | libdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to an out-of-bounds read and application crash. |
CVE-2018-14343 | High | 7.5 | 2018-07-19 | In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could crash. This was addressed in epan/dissectors/packet-ber.c by en… |
CVE-2018-14341 | High | 7.5 | 2018-07-19 | In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissec… |
CVE-2018-14337 | High | 7.5 | 2018-07-17 | The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory access becau… |
CVE-2018-14326 | High | 8.8 | 2018-07-16 | In MP4v2 2.0.0, there is an integer overflow (with resultant memory corruption) when resizing MP4Array for the ftyp atom in mp4array.h. |
CVE-2018-0360 | Medium | 5.5 | 2018-07-16 | ClamAV before 0.100.1 has an HWP integer overflow with a resultant infinite loop via a crafted Hangul Word Processor file. This is in parsehwp3_paragraph() in… |
CVE-2018-14088 | Critical | 9.8 | 2018-07-16 | An issue was discovered in a smart contract implementation for STeX White List (STE(WL)), an Ethereum token. The contract has an integer overflow. If the owner… |
CVE-2018-14087 | Critical | 9.8 | 2018-07-16 | An issue was discovered in a smart contract implementation for EUC (EUC), an Ethereum token. The contract has an integer overflow. If the owner sets the value… |
CVE-2018-14086 | Critical | 9.8 | 2018-07-16 | An issue was discovered in a smart contract implementation for SingaporeCoinOrigin (SCO), an Ethereum token. The contract has an integer overflow. If the owner… |
CVE-2018-14084 | Critical | 9.8 | 2018-07-16 | An issue was discovered in a smart contract implementation for MKCB, an Ethereum token. If the owner sets the value of sellPrice to a large number in setPrices… |
CVE-2018-14063 | Critical | 9.8 | 2018-07-15 | The increaseApproval function of a smart contract implementation for Tracto (TRCT), an Ethereum ERC20 token, has an integer overflow. |
CVE-2018-14006 | High | 7.5 | 2018-07-12 | An integer overflow vulnerability exists in the function multipleTransfer of Neo Genesis Token (NGT), an Ethereum token smart contract. An attacker could use i… |
CVE-2018-14005 | High | 7.5 | 2018-07-12 | An integer overflow vulnerability exists in the function transferAny of Malaysia coins (Xmc), an Ethereum token smart contract. An attacker could use it to set… |
CVE-2018-14004 | High | 7.5 | 2018-07-12 | An integer overflow vulnerability exists in the function transfer_tokens_after_ICO of GlobeCoin (GLB), an Ethereum token smart contract. An attacker could use… |
CVE-2018-14003 | High | 7.5 | 2018-07-12 | An integer overflow vulnerability exists in the function batchTransfer of WeMediaChain (WMC), an Ethereum token smart contract. An attacker could use it to set… |
CVE-2018-14002 | High | 7.5 | 2018-07-12 | An integer overflow vulnerability exists in the function distribute of MP3 Coin (MP3), an Ethereum token smart contract. An attacker could use it to set any us… |
CVE-2018-14001 | High | 7.5 | 2018-07-12 | An integer overflow vulnerability exists in the function batchTransfer of SHARKTECH (SKT), an Ethereum token smart contract. An attacker could use it to set an… |
CVE-2018-13836 | High | 7.5 | 2018-07-12 | An integer overflow vulnerability exists in the function multiTransfer of Rocket Coin (XRC), an Ethereum token smart contract. An attacker could use it to set… |
CVE-2018-10887 | High | 8.1 | 2018-07-10 | A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign extension in git_delta_apply function in delta.c file may lea… |
CVE-2018-5000 | Medium | 6.5 | 2018-07-09 | Adobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2018-13785 | Medium | 6.5 | 2018-07-09 | In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by… |
CVE-2018-13783 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for JiucaiToken, an Ethereum token, has an integer overflow that allows the owner of the contract to… |
CVE-2018-13782 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for ENTER (ENTR) (Contract Name: EnterCoin), an Ethereum token, has an integer overflow that allows t… |
CVE-2018-13781 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for MyYLC, an Ethereum token, has an integer overflow that allows the owner of the contract to set th… |
CVE-2018-13780 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for ESH, an Ethereum token, has an integer overflow that allows the owner of the contract to set the… |
CVE-2018-13779 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for YLCToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set… |
CVE-2018-13778 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for CGCToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set… |
CVE-2018-13777 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for RRToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set… |
CVE-2018-13776 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for AppleToken, an Ethereum token, has an integer overflow that allows the owner of the contract to s… |
CVE-2018-13775 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for RCKT_Coin, an Ethereum token, has an integer overflow that allows the owner of the contract to se… |
CVE-2018-13774 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for Bitstarti, an Ethereum token, has an integer overflow that allows the owner of the contract to se… |
CVE-2018-13773 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for Enterprise Token Ecosystem (ETE) (Contract Name: NetkillerToken), an Ethereum token, has an integ… |
CVE-2018-13772 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for TheFlashToken, an Ethereum token, has an integer overflow that allows the owner of the contract t… |
CVE-2018-13771 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for ExacoreContract, an Ethereum token, has an integer overflow that allows the owner of the contract… |
CVE-2018-13770 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for UltimateCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to… |
CVE-2018-13769 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for JeansToken, an Ethereum token, has an integer overflow that allows the owner of the contract to s… |
CVE-2018-13768 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for ZToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set t… |
CVE-2018-13767 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for Cornerstone, an Ethereum token, has an integer overflow that allows the owner of the contract to… |
CVE-2018-13766 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for Easticoin, an Ethereum token, has an integer overflow that allows the owner of the contract to se… |
CVE-2018-13765 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for LandCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set… |
CVE-2018-13764 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for BiquToken, an Ethereum token, has an integer overflow that allows the owner of the contract to se… |
CVE-2018-13763 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for Ublasti, an Ethereum token, has an integer overflow that allows the owner of the contract to set… |
CVE-2018-13762 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for Yumerium, an Ethereum token, has an integer overflow that allows the owner of the contract to set… |
CVE-2018-13761 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for NetkillerAdvancedTokenAirDrop, an Ethereum token, has an integer overflow that allows the owner o… |
CVE-2018-13760 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for MoneyChainNet (MCN), an Ethereum token, has an integer overflow that allows the owner of the cont… |
CVE-2018-13759 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for BIGCAdvancedToken, an Ethereum token, has an integer overflow that allows the owner of the contra… |
CVE-2018-13758 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for LoliCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set… |
CVE-2018-13757 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for Coinquer, an Ethereum token, has an integer overflow that allows the owner of the contract to set… |
CVE-2018-13756 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for CherryCoinFoundation, an Ethereum token, has an integer overflow that allows the owner of the con… |
CVE-2018-13755 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for OTAKUToken, an Ethereum token, has an integer overflow that allows the owner of the contract to s… |
CVE-2018-13754 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for CryptosisToken, an Ethereum token, has an integer overflow that allows the owner of the contract… |
CVE-2018-13753 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for DeWeiSecurityServiceToken, an Ethereum token, has an integer overflow that allows the owner of th… |
CVE-2018-13752 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for Thread, an Ethereum token, has an integer overflow that allows the owner of the contract to set t… |
CVE-2018-13751 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for JustWallet, an Ethereum token, has an integer overflow that allows the owner of the contract to s… |
CVE-2018-13750 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for RichiumToken, an Ethereum token, has an integer overflow that allows the owner of the contract to… |
CVE-2018-13749 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for FinalToken, an Ethereum token, has an integer overflow that allows the owner of the contract to s… |
CVE-2018-13748 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for CarToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set… |
CVE-2018-13747 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for VanMinhCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to… |
CVE-2018-13746 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for kBit, an Ethereum token, has an integer overflow that allows the owner of the contract to set the… |
CVE-2018-13745 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for STCToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set… |
CVE-2018-13744 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for Crowdnext (CNX), an Ethereum token, has an integer overflow that allows the owner of the contract… |
CVE-2018-13743 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for SuperEnergy (SEC), an Ethereum token, has an integer overflow that allows the owner of the contra… |
CVE-2018-13742 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for tickets (TKT), an Ethereum token, has an integer overflow that allows the owner of the contract t… |
CVE-2018-13741 | High | 7.5 | 2018-07-09 | The mintToken function of a smart contract implementation for ABLGenesisToken, an Ethereum token, has an integer overflow that allows the owner of the contract… |