CWE-190 · Integer Overflow or Wraparound (page 8)
Page 8 of 34 — CVEs classified under CWE-190, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-21963 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acdirmax mount option User-provided mount par… |
CVE-2025-21962 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing closetimeo mount option User-provided mount p… |
CVE-2023-53032 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. When firs… |
CVE-2023-52933 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: Squashfs: fix handling and sanity checking of xattr_ids count A Sysbot [1] corrupted file… |
CVE-2022-49750 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Add u64 casts to avoid overflowing The fields of the _CPC object are unsig… |
CVE-2022-49749 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: i2c: designware: use casting of u64 in clock multiplication to avoid overflow In function… |
CVE-2022-49748 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: fix potential integer overflow on shift of a int The left shift of int 32 b… |
CVE-2025-29072 | High | 7.5 | 2025-03-27 | An integer overflow in Nethermind Juno before v.12.05 within the Sierra bytecode decompression logic within the "cairo-lang-starknet-classes" library could all… |
CVE-2025-2574 | | 2025-03-20 | Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code. | |
CVE-2024-40635 | Medium | 4.6 | 2025-03-17 | containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User… |
CVE-2025-2295 | Low | 3.5 | 2025-03-14 | EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerabilit… |
CVE-2025-2023 | High | 7.8 | 2025-03-11 | Ashlar-Vellum Cobalt LI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
CVE-2025-2021 | High | 7.8 | 2025-03-11 | Ashlar-Vellum Cobalt XE File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
CVE-2025-24985 | High | 7.8 | 2025-03-11 | Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally. |
CVE-2025-2177 | High | 7.3 | 2025-03-11 | A vulnerability classified as critical was found in libzvbi up to 0.2.43. This vulnerability affects the function vbi_search_new of the file src/search.c. The… |
CVE-2025-2176 | High | 7.3 | 2025-03-11 | A vulnerability classified as critical has been found in libzvbi up to 0.2.43. This affects the function vbi_capture_sim_load_caption of the file src/io-sim.c… |
CVE-2025-2175 | Medium | 4.3 | 2025-03-11 | A vulnerability was found in libzvbi up to 0.2.43. It has been rated as problematic. Affected by this issue is the function _vbi_strndup_iconv. The manipulatio… |
CVE-2025-2174 | Medium | 5.3 | 2025-03-11 | A vulnerability was found in libzvbi up to 0.2.43. It has been declared as problematic. Affected by this vulnerability is the function vbi_strndup_iconv_ucs2 o… |
CVE-2024-57492 | Medium | 5.5 | 2025-03-10 | An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the round_up_to_page funciton. |
CVE-2025-20024 | Low | 3.8 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. This vulnerability can… |
CVE-2025-0587 | Low | 3.8 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. This vulnerability can… |
CVE-2025-0678 | High | 7.8 | 2025-03-03 | A flaw was found in grub2. When reading data from a squash4 filesystem, grub's squash4 fs module uses user-controlled parameters from the filesystem geometry t… |
CVE-2024-45778 | Medium | 4.1 | 2025-03-03 | A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash. |
CVE-2024-45779 | Medium | 6.0 | 2025-03-03 | An integer overflow flaw was found in the BFS file system driver in grub2. When reading a file with an indirect extent map, grub2 fails to validate the number… |
CVE-2024-53025 | Medium | 5.5 | 2025-03-03 | Transient DOS can occur while processing UCI command. |
CVE-2025-20653 | Medium | 6.5 | 2025-03-03 | In da, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure, if an attacker has physical access t… |
CVE-2025-21748 | Critical | 9.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix integer overflows on 32 bit systems On 32bit systems the addition operations i… |
CVE-2025-21736 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix possible int overflows in nilfs_fiemap() Since nilfs_bmap_lookup_contig() in… |
CVE-2024-58017 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX Shifting 1 << 31 on a 3… |
CVE-2024-58010 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: binfmt_flat: Fix integer overflow bug on 32 bit systems Most of these sizes and counts ar… |
CVE-2024-52559 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit() The "submit->cmd[i].size"… |
CVE-2024-52557 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: drm: zynqmp_dp: Fix integer overflow in zynqmp_dp_rate_get() This patch fixes a potential… |
CVE-2025-21711 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: net/rose: prevent integer overflows in rose_setsockopt() In case of possible unpredictabl… |
CVE-2024-57973 | High | 8.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: rdma/cxgb4: Prevent potential integer overflow on 32bit The "gl->tot_len" variable is con… |
CVE-2024-57953 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: rtc: tps6594: Fix integer overflow on 32bit systems The problem is this multiply in tps65… |
CVE-2022-49728 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix signed integer overflow in __ip6_append_data Resurrect ubsan overflow checks an… |
CVE-2022-49727 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg When len >= INT_MAX - transhdrlen… |
CVE-2022-49643 | High | 7.1 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ima: Fix a potential integer overflow in ima_appraise_measurement When the ima-modsig is… |
CVE-2022-49642 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwc-qos: Disable split header for Tegra194 There is a long-standing issue wi… |
CVE-2022-49570 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: gpio: gpio-xilinx: Fix integer overflow Current implementation is not able to configure m… |
CVE-2022-49553 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate BOOT sectors_per_clusters When the NTFS BOOT sectors_per_clusters fiel… |
CVE-2022-49451 | High | 8.4 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix list protocols enumeration in the base protocol While enumerating… |
CVE-2022-49404 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Fix potential integer multiplication overflow errors When multiplying of diffe… |
CVE-2022-49387 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: watchdog: rzg2l_wdt: Fix 32bit overflow issue The value of timer_cycle_us can be 0 due to… |
CVE-2022-49320 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type In zynqmp_dma_al… |
CVE-2022-49289 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: uaccess: fix integer overflow on access_ok() Three architectures check the end of a user… |
CVE-2022-49279 | High | 8.2 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: NFSD: prevent integer overflow on 32 bit systems On a 32 bit system, the "len * sizeof(*p… |
CVE-2022-49222 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: drm/bridge: anx7625: Fix overflow issue on reading EDID The length of EDID block can be l… |
CVE-2022-49197 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: af_netlink: Fix shift out of bounds in group mask calculation When a netlink message is r… |
CVE-2022-49075 | High | 8.1 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix qgroup reserve overflow the qgroup limit We use extent_changeset->bytes_change… |
CVE-2025-0838 | Critical | 9.8 | 2025-02-21 | There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not… |
CVE-2024-57262 | High | 7.1 | 2025-02-19 | In barebox before 2025.01.0, ext4fs_read_symlink has an integer overflow for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inod… |
CVE-2024-57261 | High | 7.1 | 2025-02-19 | In barebox before 2025.01.0, request2size in common/dlmalloc.c has an integer overflow, a related issue to CVE-2024-57258. |
CVE-2024-57258 | High | 7.1 | 2025-02-18 | Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, or because ptrdiff_… |
CVE-2024-57256 | High | 7.1 | 2025-02-18 | An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem wi… |
CVE-2024-57255 | High | 7.1 | 2025-02-18 | An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xffffffff, resulti… |
CVE-2024-57254 | High | 7.1 | 2025-02-18 | An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a crafted squashfs filesystem. |
CVE-2023-34406 | Low | 3.3 | 2025-02-13 | An issue was discovered on Mercedes Benz NTG 6. A possible integer overflow exists in the user data import/export function of NTG (New Telematics Generation) 6… |
CVE-2023-34399 | Critical | 9.8 | 2025-02-13 | Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost… |
CVE-2024-11347 | High | 7.3 | 2025-02-13 | Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Forced Integer Overflow.The v… |
CVE-2024-53880 | Medium | 4.9 | 2025-02-12 | NVIDIA Triton Inference Server contains a vulnerability in the model loading API, where a user could cause an integer overflow or wraparound error by loading a… |
CVE-2023-20507 | Low | 2.3 | 2025-02-11 | An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data integrity. |
CVE-2025-21369 | High | 8.8 | 2025-02-11 | Microsoft Digest Authentication Remote Code Execution Vulnerability |
CVE-2025-0302 | Medium | 5.5 | 2025-02-07 | in OpenHarmony v4.1.2 and prior versions allow a local attacker cause DOS through integer overflow. |
CVE-2024-13614 | Medium | 5.3 | 2025-02-06 | Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security fo… |
CVE-2024-34733 | High | 8.4 | 2025-01-28 | In DevmemXIntMapPages of devicemem_server.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of pr… |
CVE-2017-13318 | Medium | 5.7 | 2025-01-28 | In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disc… |
CVE-2025-24156 | High | 7.8 | 2025-01-27 | An integer overflow was addressed through improved input validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An a… |
CVE-2024-57938 | Medium | 5.5 | 2025-01-21 | In the Linux kernel, the following vulnerability has been resolved: net/sctp: Prevent autoclose integer overflow in sctp_association_init() While by default… |
CVE-2024-57890 | Medium | 5.5 | 2025-01-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Prevent integer overflow issue In the expression "cmd.wqe_size * cmd.wr_coun… |
CVE-2025-21382 | High | 7.8 | 2025-01-14 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2025-21338 | High | 7.8 | 2025-01-14 | GDI+ Remote Code Execution Vulnerability |
CVE-2025-21244 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21243 | High | 8.8 | 2025-01-14 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21172 | High | 7.5 | 2025-01-14 | .NET and Visual Studio Remote Code Execution Vulnerability |
CVE-2024-46669 | Low | 3.5 | 2025-01-14 | An Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2.10 and below; FortiSASE version 23.4.b FortiOS tenant IPsec I… |
CVE-2024-56368 | High | 7.1 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix overflow in __rb_map_vma An overflow occurred when performing the follow… |
CVE-2025-23022 | Medium | 4.0 | 2025-01-10 | FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c. |
CVE-2025-23016 | Critical | 9.3 | 2025-01-10 | FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to… |
CVE-2024-40765 | Critical | 9.8 | 2025-01-09 | An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and po… |
CVE-2024-55656 | High | 8.8 | 2025-01-08 | RedisBloom adds a set of probabilistic data structures to Redis. There is an integer overflow vulnerability in RedisBloom, which is a module used in Redis. The… |
CVE-2024-51737 | High | 7.0 | 2025-01-08 | RediSearch is a Redis module that provides querying, secondary indexing, and full-text search for Redis. An authenticated redis user executing FT.SEARCH or FT… |
CVE-2024-51480 | High | 7.0 | 2025-01-08 | RedisTimeSeries is a time-series database (TSDB) module for Redis, by Redis. Executing one of these commands TS.QUERYINDEX, TS.MGET, TS.MRAGE, TS.MREVRANGE by… |
CVE-2024-56451 | High | 7.3 | 2025-01-08 | Integer overflow vulnerability during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-45555 | High | 8.4 | 2025-01-06 | Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected int… |
CVE-2024-36613 | Medium | 6.2 | 2025-01-03 | FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an integer overflow, potentially resulting in a denial-of-service… |
CVE-2024-50944 | Critical | 9.8 | 2024-12-27 | Integer overflow vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f in the shopping cart functionality. The issue lies in… |
CVE-2024-53187 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: io_uring: check for overflows in io_pin_pages WARNING: CPU: 0 PID: 5834 at io_uring/memma… |
CVE-2024-51540 | High | 8.1 | 2024-12-26 | Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user with bucket… |
CVE-2024-53161 | Medium | 5.5 | 2024-12-24 | In the Linux kernel, the following vulnerability has been resolved: EDAC/bluefield: Fix potential integer overflow The 64-bit argument for the "get DIMM info… |
CVE-2024-53151 | High | 7.5 | 2024-12-24 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Address an integer overflow Dan Carpenter reports: > Commit 78147ca8b4a9 ("svcrd… |
CVE-2024-53146 | Critical | 9.1 | 2024-12-24 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is >= U32_MAX - 3 then the "… |
CVE-2024-53145 | Medium | 5.5 | 2024-12-24 | In the Linux kernel, the following vulnerability has been resolved: um: Fix potential integer overflow during physmem setup This issue happens when the real… |
CVE-2024-52059 | High | 7.8 | 2024-12-13 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in RTI Connext… |
CVE-2024-49112 | Critical | 9.8 | 2024-12-12 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2024-49089 | High | 7.2 | 2024-12-12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-49085 | High | 8.8 | 2024-12-12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-49078 | Medium | 6.8 | 2024-12-12 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
CVE-2024-47606 | Critical | 9.8 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_theora_extens… |
CVE-2024-47537 | Critical | 9.8 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. The program attempts to reallocate the memory pointed to by stream->samples to acc… |