CWE-190 · Integer Overflow or Wraparound (page 32)
Page 32 of 34 — CVEs classified under CWE-190, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-6839 | Medium | 5.5 | 2017-03-20 | Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted… |
CVE-2017-6838 | Medium | 5.5 | 2017-03-20 | Integer overflow in sfcommands/sfconvert.c in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a craft… |
CVE-2015-8983 | High | 8.1 | 2017-03-20 | Integer overflow in the _IO_wstr_overflow function in libio/wstrops.c in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers… |
CVE-2015-4645 | Medium | 5.5 | 2017-03-17 | Integer overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause a denial of service (applicat… |
CVE-2017-6962 | High | 7.5 | 2017-03-17 | An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer overflow. This is related to the read_chunk function mak… |
CVE-2017-6960 | High | 7.5 | 2017-03-17 | An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, related to the load_apng function and the ima… |
CVE-2017-0104 | High | 8.1 | 2017-03-17 | The iSNS Server service in Microsoft Windows Server 2008 SP2 and R2, Windows Server 2012 Gold and R2, and Windows Server 2016 allows remote attackers to issue… |
CVE-2017-6952 | High | 8.8 | 2017-03-16 | Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service (heap-based… |
CVE-2017-5898 | Medium | 5.5 | 2017-03-15 | Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator… |
CVE-2015-8982 | High | 8.1 | 2017-03-15 | Integer overflow in the strxfrm function in the GNU C Library (aka glibc or libc6) before 2.21 allows context-dependent attackers to cause a denial of service… |
CVE-2015-8895 | High | 7.5 | 2017-03-15 | Integer overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote attackers to cause a denial of service (application crash) via a crafted lengt… |
CVE-2016-10168 | High | 7.8 | 2017-03-15 | Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the nu… |
CVE-2017-6440 | Medium | 5.0 | 2017-03-15 | The parse_data_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a craf… |
CVE-2016-10251 | High | 7.8 | 2017-03-15 | Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file… |
CVE-2016-10249 | High | 7.8 | 2017-03-15 | Integer overflow in the jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impact via a crafted ima… |
CVE-2017-6355 | Medium | 5.5 | 2017-03-10 | Integer overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service… |
CVE-2017-6312 | Medium | 5.5 | 2017-03-10 | Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a cra… |
CVE-2017-0521 | High | 7.0 | 2017-03-08 | An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context o… |
CVE-2017-0307 | High | 7.8 | 2017-03-08 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-6522 | Medium | 5.5 | 2017-03-07 | Integer overflow in the uvm_map_isavail function in uvm/uvm_map.c in OpenBSD 5.9 allows local users to cause a denial of service (kernel panic) via a crafted m… |
CVE-2016-6241 | High | 7.8 | 2017-03-07 | Integer overflow in the amap_alloc1 function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via a large size value. |
CVE-2017-5853 | High | 7.8 | 2017-03-01 | Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file. |
CVE-2017-5501 | Medium | 5.5 | 2017-03-01 | Integer overflow in libjasper/jpc/jpc_tsfb.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file. |
CVE-2017-5499 | Medium | 5.5 | 2017-03-01 | Integer overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file. |
CVE-2016-9824 | Medium | 5.5 | 2017-03-01 | Integer overflow in libswscale/x86/swscale.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file. |
CVE-2016-9822 | Medium | 5.5 | 2017-03-01 | Integer overflow in libavcodec/mpeg12dec.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file. |
CVE-2016-9821 | Medium | 5.5 | 2017-03-01 | Integer overflow in libavcodec/mpegvideo_parser.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file. |
CVE-2016-10093 | High | 7.8 | 2017-03-01 | Integer overflow in tools/tiffcp.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2… |
CVE-2017-5885 | Critical | 9.8 | 2017-02-28 | Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc before 0.7.0 allow remote servers to cause a… |
CVE-2016-9558 | Critical | 9.8 | 2017-02-28 | (1) libdwarf/dwarf_leb.c and (2) dwarfdump/print_frames.c in libdwarf before 20161124 allow remote attackers to have unspecified impact via a crafted bit patte… |
CVE-2016-8389 | High | 7.8 | 2017-02-28 | An exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will attempt to convert each ch… |
CVE-2017-6350 | Critical | 9.8 | 2017-02-27 | An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree le… |
CVE-2017-6349 | Critical | 9.8 | 2017-02-27 | An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length… |
CVE-2016-4490 | Medium | 5.5 | 2017-02-24 | Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, relate… |
CVE-2016-4489 | Medium | 5.5 | 2017-02-24 | Integer overflow in the gnu_special function in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted bin… |
CVE-2016-2226 | High | 7.8 | 2017-02-24 | Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which t… |
CVE-2017-6308 | High | 7.8 | 2017-02-24 | An issue was discovered in tnef before 1.4.13. Several Integer Overflows, which can lead to Heap Overflows, have been identified in the functions that wrap mem… |
CVE-2017-6303 | High | 7.8 | 2017-02-24 | An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "6 of 9. Invalid Write and Integer Overflow." |
CVE-2017-6302 | High | 7.8 | 2017-02-24 | An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "5 of 9. Integer Overflow." |
CVE-2016-8636 | High | 7.8 | 2017-02-22 | Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.10 allows local users to cause a denial o… |
CVE-2016-7511 | Medium | 5.5 | 2017-02-17 | Integer overflow in the dwarf_die_deliv.c in libdwarf 20160613 allows remote attackers to cause a denial of service (crash) via a crafted file. |
CVE-2016-6872 | Critical | 9.8 | 2017-02-17 | Integer overflow in StringUtil::implode in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors. |
CVE-2016-6871 | Critical | 9.8 | 2017-02-17 | Integer overflow in bcmath in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors, which triggers a buffer overflow. |
CVE-2016-6252 | High | 7.8 | 2017-02-17 | Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap. |
CVE-2017-0309 | High | 8.8 | 2017-02-15 | All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where multiple integer overflows may cause improper memory a… |
CVE-2016-1889 | High | 7.8 | 2017-02-15 | Integer overflow in the bhyve hypervisor in FreeBSD 10.1, 10.2, 10.3, and 11.0 when configured with a large amount of guest memory, allows local users to gain… |
CVE-2017-2987 | High | 8.8 | 2017-02-15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable integer overflow vulnerability related to Flash Broker COM. Successful exploitation coul… |
CVE-2016-8859 | Critical | 9.8 | 2017-02-13 | Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of (1) states or (2) tags, which trig… |
CVE-2017-5953 | Critical | 9.8 | 2017-02-10 | vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory all… |
CVE-2016-2147 | High | 7.5 | 2017-02-09 | Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to cause a denial of service (crash) via a malformed RFC1035-enco… |
CVE-2017-0410 | High | 7.8 | 2017-02-08 | An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a priv… |
CVE-2015-7599 | High | 8.1 | 2017-02-07 | Integer overflow in the _authenticate function in svc_auth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call (RPC) protocol is enable… |
CVE-2017-5576 | High | 7.8 | 2017-02-06 | Integer overflow in the vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 allows local users t… |
CVE-2016-9108 | High | 7.5 | 2017-02-03 | Integer overflow in the js_regcomp function in regexp.c in Artifex Software, Inc. MuJS before commit b6de34ac6d8bb7dd5461c57940acfbd3ee7fd93e allows attackers… |
CVE-2016-9085 | Low | 3.3 | 2017-02-03 | Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors. |
CVE-2016-9082 | Medium | 5.5 | 2017-02-03 | Integer overflow in the write_png function in cairo 1.14.6 allows remote attackers to cause a denial of service (invalid pointer dereference) via a large svg f… |
CVE-2016-4352 | Medium | 5.5 | 2017-02-03 | Integer overflow in the demuxer function in libmpdemux/demux_gif.c in Mplayer allows remote attackers to cause a denial of service (crash) via large dimensions… |
CVE-2016-10164 | Critical | 9.8 | 2017-02-01 | Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a deni… |
CVE-2016-9132 | Critical | 9.8 | 2017-01-30 | In Botan 1.8.0 through 1.11.33, when decoding BER data an integer overflow could occur, which would cause an incorrect length field to be computed. Some API ca… |
CVE-2016-2399 | High | 7.8 | 2017-01-30 | Integer overflow in the quicktime_read_pascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause a denial of service or possibly have… |
CVE-2017-5628 | High | 7.8 | 2017-01-30 | An issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay function in jsdate.c does not validate the… |
CVE-2017-5627 | High | 7.8 | 2017-01-30 | An issue was discovered in Artifex Software, Inc. MuJS before 4006739a28367c708dea19aeb19b8a1a9326ce08. The jsR_setproperty function in jsrun.c lacks a check f… |
CVE-2016-7938 | Critical | 9.8 | 2017-01-28 | The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1_print_frame(). |
CVE-2017-5597 | High | 7.5 | 2017-01-25 | In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. Thi… |
CVE-2017-5596 | High | 7.5 | 2017-01-25 | In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX dissector could go into an infinite loop, triggered by packet injection or a malformed capture file… |
CVE-2016-10159 | High | 7.5 | 2017-01-24 | Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial… |
CVE-2016-9445 | High | 7.5 | 2017-01-23 | Integer overflow in the vmnc decoder in the gstreamer allows remote attackers to cause a denial of service (crash) via large width and height values, which tri… |
CVE-2016-6164 | Critical | 9.8 | 2017-01-23 | Integer overflow in the mov_build_index function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0.x before 3.0.3 and 3.1.x before 3.1.1 allows remote attackers… |
CVE-2016-5223 | Medium | 6.5 | 2017-01-19 | Integer overflow in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potenti… |
CVE-2016-5221 | Medium | 6.3 | 2017-01-19 | Type confusion in libGLESv2 in ANGLE in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android possibly allowed a remote… |
CVE-2016-6823 | High | 7.5 | 2017-01-18 | Integer overflow in the BMP coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (crash) via crafted height and width valu… |
CVE-2016-10141 | Critical | 9.8 | 2017-01-13 | An integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex Software, Inc. MuJS before fa3d30fd18c348bb4b1f3858fb860f4fcd4b20… |
CVE-2017-0383 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a priv… |
CVE-2017-0381 | High | 7.8 | 2017-01-12 | An information disclosure vulnerability in silk/NLSF_stabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of… |
CVE-2016-8438 | Critical | 9.8 | 2017-01-12 | Integer overflow leading to a TOCTOU condition in hypervisor PIL. An integer overflow exposes a race condition that may be used to bypass (Peripheral Image Loa… |
CVE-2017-5340 | Critical | 9.8 | 2017-01-11 | Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations, which allows remote attackers to ex… |
CVE-2016-8706 | High | 8.1 | 2017-01-06 | An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abuse… |
CVE-2016-8705 | Critical | 9.8 | 2017-01-06 | Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can… |
CVE-2016-8704 | Critical | 9.8 | 2017-01-06 | An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol… |
CVE-2016-4298 | High | 7.8 | 2017-01-06 | When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will attempt to allocate space for a list of ele… |
CVE-2016-4291 | High | 7.8 | 2017-01-06 | When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will use a field from the structure in an operat… |
CVE-2016-4290 | High | 7.8 | 2017-01-06 | When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will attempt to allocate space for a block of da… |
CVE-2015-7848 | High | 7.5 | 2017-01-06 | An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The… |
CVE-2016-9754 | High | 7.8 | 2017-01-05 | The ring_buffer_resize function in kernel/trace/ring_buffer.c in the profiling subsystem in the Linux kernel before 4.6.1 mishandles certain integer calculatio… |
CVE-2016-7875 | High | 8.8 | 2016-12-15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable integer overflow vulnerability in the BitmapData class. Succes… |
CVE-2016-9031 | High | 7.8 | 2016-12-14 | An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with… |
CVE-2016-8733 | High | 8.8 | 2016-12-14 | An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with… |
CVE-2016-7951 | Critical | 9.8 | 2016-12-13 | Multiple integer overflows in X.org libXtst before 1.2.3 allow remote X servers to trigger out-of-bounds memory access operations by leveraging the lack of ran… |
CVE-2016-7947 | Critical | 9.8 | 2016-12-13 | Multiple integer overflows in X.org libXrandr before 1.5.1 allow remote X servers to trigger out-of-bounds write operations via a crafted response. |
CVE-2016-7945 | High | 7.5 | 2016-12-13 | Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service (out-of-bounds memory access or infinite loop) via v… |
CVE-2016-7944 | Critical | 9.8 | 2016-12-13 | Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INT_MAX, which trigg… |
CVE-2016-5841 | Critical | 9.8 | 2016-12-13 | Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of service (segmentation fault) or possibly ex… |
CVE-2016-9427 | Critical | 9.8 | 2016-12-12 | Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service (heap buffer overflow crash) and possibly… |
CVE-2016-9426 | High | 8.8 | 2016-12-12 | An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Integer overflow vulnerability in the renderTable function in w3m allows remote atta… |
CVE-2016-6888 | Medium | 4.4 | 2016-12-10 | Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of… |
CVE-2016-9104 | Medium | 4.4 | 2016-12-09 | Multiple integer overflows in the (1) v9fs_xattr_read and (2) v9fs_xattr_write functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS admi… |
CVE-2015-8870 | High | 7.4 | 2016-12-06 | Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly ob… |
CVE-2016-9084 | High | 7.8 | 2016-11-28 | drivers/vfio/pci/vfio_pci_intrs.c in the Linux kernel through 4.8.11 misuses the kzalloc function, which allows local users to cause a denial of service (integ… |
CVE-2016-9083 | High | 7.8 | 2016-11-28 | drivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.11 allows local users to bypass integer overflow checks, and cause a denial of service (memory corr… |
CVE-2016-9538 | Critical | 9.8 | 2016-11-22 | tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer() because of a uint16 integer overflow. Reported as MSVR 35100. |