CWE-190 · Integer Overflow or Wraparound (page 24)
Page 24 of 37 — CVEs classified under CWE-190, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-9308 | High | 8.8 | 2019-09-27 | In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privile… |
CVE-2019-9307 | High | 8.8 | 2019-09-27 | In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privile… |
CVE-2019-9306 | High | 8.8 | 2019-09-27 | In libMpegTPDec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution priv… |
CVE-2019-9305 | High | 8.8 | 2019-09-27 | In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privile… |
CVE-2019-9304 | High | 8.8 | 2019-09-27 | In libMpegTPDec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution priv… |
CVE-2019-9303 | High | 8.8 | 2019-09-27 | In libFDK, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges… |
CVE-2019-9302 | High | 8.8 | 2019-09-27 | In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privile… |
CVE-2019-9301 | Critical | 9.8 | 2019-09-27 | In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privile… |
CVE-2019-9300 | High | 8.8 | 2019-09-27 | In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privile… |
CVE-2019-9299 | High | 8.8 | 2019-09-27 | In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privile… |
CVE-2019-9298 | High | 8.8 | 2019-09-27 | In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privile… |
CVE-2019-9297 | High | 8.8 | 2019-09-27 | In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privile… |
CVE-2019-9278 | High | 8.8 | 2019-09-27 | In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider… |
CVE-2019-9262 | High | 8.8 | 2019-09-27 | In MPEG4Extractor, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution in the media extractor with no… |
CVE-2019-9257 | High | 7.8 | 2019-09-27 | In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution… |
CVE-2019-9256 | High | 8.8 | 2019-09-27 | In libmediaextractor there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution… |
CVE-2019-6010 | High | 7.8 | 2019-09-19 | Integer overflow vulnerability in LINE(Android) from 4.4.0 to the version before 9.15.1 allows remote attackers to cause a denial of service (DoS) condition or… |
CVE-2019-6007 | High | 8.8 | 2019-09-12 | Integer overflow vulnerability in apng-drawable 1.0.0 to 1.6.0 allows an attacker to cause a denial of service (DoS) condition or execute arbitrary code via un… |
CVE-2019-16167 | Medium | 5.5 | 2019-09-09 | sysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in sa_common.c. |
CVE-2019-16096 | High | 7.5 | 2019-09-08 | Kilo 0.0.1 has a heap-based buffer overflow because there is an integer overflow in a calculation involving the number of tabs in one row. |
CVE-2019-2181 | High | 7.8 | 2019-09-05 | In binder_transaction of binder.c in the Android kernel, there is a possible out of bounds write due to an integer overflow. This could lead to local escalatio… |
CVE-2019-2179 | Medium | 5.5 | 2019-09-05 | In NDEF_MsgValidate of ndef_utils in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds read due to an integer overflow. This could lead t… |
CVE-2018-21009 | High | 8.8 | 2019-09-05 | Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc. |
CVE-2019-11476 | Medium | 6.5 | 2019-08-29 | An integer overflow in whoopsie before versions 0.2.52.5ubuntu0.1, 0.2.62ubuntu0.1, 0.2.64ubuntu0.1, 0.2.66, results in an out-of-bounds write to a heap alloca… |
CVE-2019-15788 | Critical | 9.8 | 2019-08-29 | Clara Genomics Analysis before 0.2.0 has an integer overflow for cudapoa memory management in allocate_block.cpp. |
CVE-2019-15787 | High | 7.5 | 2019-08-29 | libZetta.rs through 0.1.2 has an integer overflow in the zpool parser (for error stats) that leads to a panic. |
CVE-2019-9930 | Critical | 9.8 | 2019-08-28 | Various Lexmark products have an Integer Overflow. |
CVE-2019-10055 | High | 7.5 | 2019-08-28 | An issue was discovered in Suricata 4.1.3. The function ftp_pasv_response lacks a check for the length of part1 and part2, leading to a crash within the ftp/mo… |
CVE-2019-8101 | High | 7.5 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8099 | High | 7.5 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-5040 | High | 7.5 | 2019-08-20 | An exploitable information disclosure vulnerability exists in the Weave MessageLayer parsing of Openweave-core version 4.0.2 and Nest Cam IQ Indoor version 462… |
CVE-2019-5037 | High | 7.5 | 2019-08-20 | An exploitable denial-of-service vulnerability exists in the Weave certificate loading functionality of Nest Cam IQ Indoor camera, version 4620002. A specially… |
CVE-2019-2134 | High | 7.8 | 2019-08-20 | In phFriNfc_ExtnsTransceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalatio… |
CVE-2019-14973 | Medium | 6.5 | 2019-08-14 | _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavior that is… |
CVE-2019-14982 | Medium | 6.5 | 2019-08-12 | In Exiv2 before v0.27.2, there is an integer overflow vulnerability in the WebPImage::getHeaderOffset function in webpimage.cpp. It can lead to a buffer overfl… |
CVE-2015-5297 | Medium | 6.7 | 2019-07-31 | An integer overflow issue has been reported in the general_composite_rect() function in pixman prior to version 0.32.8. An attacker could exploit this issue to… |
CVE-2019-14459 | High | 7.5 | 2019-07-31 | nfdump 1.6.17 and earlier is affected by an integer overflow in the function Process_ipfix_template_withdraw in ipfix.c that can be abused in order to crash th… |
CVE-2019-5060 | High | 8.8 | 2019-07-31 | An exploitable code execution vulnerability exists in the XPM image rendering function of SDL2_image 2.0.4. A specially crafted XPM image can cause an integer… |
CVE-2019-5059 | High | 8.8 | 2019-07-31 | An exploitable code execution vulnerability exists in the XPM image rendering functionality of SDL2_image 2.0.4. A specially crafted XPM image can cause an int… |
CVE-2019-10142 | High | 7.1 | 2019-07-30 | A flaw was found in the Linux kernel's freescale hypervisor manager implementation, kernel versions 5.0.x up to, excluding 5.0.17. A parameter passed to an ioc… |
CVE-2019-14444 | Medium | 5.5 | 2019-07-30 | apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation (in byte_put_little_… |
CVE-2019-13126 | High | 7.5 | 2019-07-29 | An integer overflow in NATS Server before 2.0.2 allows a remote attacker to crash the server by sending a crafted request. If authentication is enabled, then t… |
CVE-2019-14295 | Medium | 5.5 | 2019-07-27 | An Integer overflow in the getElfSections function in p_vmlinx.cpp in UPX 3.95 allows remote attackers to cause a denial of service (crash) via a skewed offset… |
CVE-2019-14289 | Medium | 5.5 | 2019-07-27 | An issue was discovered in Xpdf 4.01.01. There is an integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "multiple bytes per line"… |
CVE-2019-14288 | High | 7.8 | 2019-07-27 | An issue was discovered in Xpdf 4.01.01. There is an Integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "one byte per line" case. |
CVE-2019-14283 | Medium | 6.8 | 2019-07-26 | In the Linux kernel before 5.2.3, set_geometry in drivers/block/floppy.c does not validate the sect and head fields, as demonstrated by an integer overflow and… |
CVE-2019-2309 | Critical | 9.8 | 2019-07-25 | While storing calibrated data from firmware in cache, An integer overflow may occur since data length received may exceed real data length. in Snapdragon Auto… |
CVE-2019-14250 | Medium | 5.5 | 2019-07-24 | An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrnd… |
CVE-2019-12552 | Medium | 5.5 | 2019-07-22 | In SweetScape 010 Editor 9.0.1, an integer overflow during the initialization of variables could allow an attacker to cause a denial of service. |
CVE-2019-9959 | Medium | 6.5 | 2019-07-22 | The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making i… |
CVE-2019-1010249 | Medium | 4.9 | 2019-07-18 | The Linux Foundation ONOS 2.0.0 and earlier is affected by: Integer Overflow. The impact is: A network administrator (or attacker) can install unintended flow… |
CVE-2019-1010065 | Medium | 6.5 | 2019-07-18 | The Sleuth Kit 4.6.0 and earlier is affected by: Integer Overflow. The impact is: Opening crafted disk image triggers crash in tsk/fs/hfs_dent.c:237. The compo… |
CVE-2019-13115 | High | 8.1 | 2019-07-16 | In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read… |
CVE-2019-1010298 | Critical | 9.8 | 2019-07-15 | Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code execution in the context of TEE core (kernel). The component is: op… |
CVE-2019-1010297 | Critical | 9.8 | 2019-07-15 | Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Execution of code in TEE core (kernel) context. The component is: optee_… |
CVE-2019-1010296 | Critical | 9.8 | 2019-07-15 | Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code execution in context of TEE core (kernel). The component is: optee_… |
CVE-2019-1010006 | High | 7.8 | 2019-07-15 | Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector i… |
CVE-2019-13590 | Medium | 5.5 | 2019-07-14 | An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h (startread function), there is an integer overflow on the result of integer addition (wraparoun… |
CVE-2019-5052 | High | 8.8 | 2019-07-03 | An exploitable integer overflow vulnerability exists when loading a PCX file in SDL2_image 2.0.4. A specially crafted file can cause an integer overflow, resul… |
CVE-2019-13136 | High | 7.8 | 2019-07-01 | ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c. |
CVE-2019-13111 | Medium | 5.5 | 2019-06-30 | A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (large heap allocation followed by a very lo… |
CVE-2019-13110 | Medium | 6.5 | 2019-06-30 | A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a… |
CVE-2019-13109 | Medium | 6.5 | 2019-06-30 | An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because PngImage::readMetad… |
CVE-2019-13108 | Medium | 6.5 | 2019-06-30 | An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because PngImage::readMetad… |
CVE-2019-13107 | Critical | 9.8 | 2019-06-30 | Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c |
CVE-2019-13049 | High | 7.8 | 2019-06-29 | An integer wrap in kernel/sys/syscall.c in ToaruOS 1.10.10 allows users to map arbitrary kernel pages into userland process space via TOARU_SYS_FUNC_MMAP, lead… |
CVE-2019-13048 | Medium | 5.5 | 2019-06-29 | kernel/sys/syscall.c in ToaruOS through 1.10.9 allows a denial of service upon a critical error in certain sys_sbrk allocation patterns (involving PAGE_SIZE, a… |
CVE-2019-5829 | High | 8.8 | 2019-06-27 | Integer overflow in download manager in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a… |
CVE-2019-5827 | High | 8.8 | 2019-06-27 | Integer overflow in SQLite via WebSQL in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… |
CVE-2019-5821 | High | 8.8 | 2019-06-27 | Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. |
CVE-2019-5820 | High | 8.8 | 2019-06-27 | Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. |
CVE-2019-5806 | High | 8.8 | 2019-06-27 | Integer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… |
CVE-2018-16070 | High | 8.8 | 2019-06-27 | Integer overflows in Skia in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2019-12980 | Medium | 6.5 | 2019-06-26 | In Ming (aka libming) 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the SWFInput_readSBits function in blocks/input.c. Remote a… |
CVE-2018-20847 | High | 8.8 | 2019-06-26 | An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in OpenJPEG through 2.3.0 can lead to an i… |
CVE-2019-2007 | Critical | 9.8 | 2019-06-19 | In getReadIndex and getWriteIndex of FifoControllerBase.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escal… |
CVE-2019-6114 | High | 8.8 | 2019-06-19 | An issue was discovered in Corel PaintShop Pro 2019 21.0.0.119. An integer overflow in the jp2 parsing library allows an attacker to overwrite memory and to ex… |
CVE-2019-11477 | High | 7.5 | 2019-06-19 | Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Ackn… |
CVE-2019-11039 | Critical | 9.1 | 2019-06-19 | Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer… |
CVE-2019-3946 | High | 7.5 | 2019-06-12 | Fuji Electric V-Server before 6.0.33.0 is vulnerable to denial of service via a crafted UDP message sent to port 8005. An unauthenticated, remote attacker can… |
CVE-2019-6753 | Medium | 5.5 | 2019-06-03 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.3.0.10826. User interaction is requi… |
CVE-2019-9865 | High | 8.1 | 2019-05-29 | When RPC is enabled in Wind River VxWorks 6.9 prior to 6.9.1, a specially crafted RPC request can trigger an integer overflow leading to an out-of-bounds memor… |
CVE-2019-5435 | Low | 3.7 | 2019-05-28 | An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1. |
CVE-2019-7030 | High | 7.5 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2018-13887 | Critical | 9.8 | 2019-05-24 | Untrusted header fields in GNSS XTRA3 function can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industr… |
CVE-2018-13886 | Critical | 9.8 | 2019-05-24 | Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Con… |
CVE-2018-11968 | High | 7.8 | 2019-05-24 | Improper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electro… |
CVE-2018-11925 | High | 7.8 | 2019-05-24 | Data length received from firmware is not validated against the max allowed size which can result in buffer overflow. in Snapdragon Auto, Snapdragon Compute, S… |
CVE-2018-11924 | High | 7.8 | 2019-05-24 | Improper buffer length validation in WLAN function can lead to a potential integer oveflow issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer El… |
CVE-2018-11923 | High | 7.8 | 2019-05-24 | Improper buffer length check before copying can lead to integer overflow and then a buffer overflow in WMA event handler in Snapdragon Auto, Snapdragon Compute… |
CVE-2019-5795 | High | 8.8 | 2019-05-23 | Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PD… |
CVE-2019-5792 | High | 8.8 | 2019-05-23 | Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PD… |
CVE-2019-5790 | High | 8.8 | 2019-05-23 | An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to execute arbi… |
CVE-2019-5789 | High | 8.8 | 2019-05-23 | An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had compromised t… |
CVE-2019-5788 | High | 8.8 | 2019-05-23 | An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had compromis… |
CVE-2019-12247 | High | 7.5 | 2019-05-22 | QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables. NOTE… |
CVE-2019-11878 | Medium | 6.5 | 2019-05-10 | An issue was discovered on XiongMai Besder IP20H1 V4.02.R12.00035520.12012.047500.00200 cameras. An attacker on the same local network as the camera can craft… |
CVE-2019-2046 | Critical | 9.8 | 2019-05-08 | In CalculateInstanceSizeForDerivedClass of objects.cc, there is possible memory corruption due to an integer overflow. This could lead to remote code execution… |
CVE-2017-18279 | High | 7.8 | 2019-05-06 | Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear in FSM9055, FS… |
CVE-2017-18173 | High | 7.8 | 2019-05-06 | In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapdragon Mobile in SD 425, SD 427, SD 430… |