CWE-191 · Integer Underflow (page 3)
Page 3 of 6 — CVEs classified under CWE-191, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-30296 | High | 7.8 | 2025-04-08 | Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary cod… |
CVE-2025-2259 | High | 7.5 | 2025-04-06 | In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause an integer underflow and a subsequent denial of ser… |
CVE-2025-2258 | High | 7.5 | 2025-04-06 | In NetX Duo component HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause an integer underflow and a subsequent… |
CVE-2024-50597 | Medium | 4.3 | 2025-04-02 | An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted networ… |
CVE-2024-50596 | Medium | 4.3 | 2025-04-02 | An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted networ… |
CVE-2024-50595 | Medium | 4.3 | 2025-04-02 | An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted series… |
CVE-2024-50594 | Medium | 4.3 | 2025-04-02 | An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted series… |
CVE-2025-30356 | Critical | 9.8 | 2025-04-01 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between… |
CVE-2025-2581 | Medium | 4.3 | 2025-03-21 | A vulnerability has been found in xmedcon 0.25.0 and classified as problematic. Affected by this vulnerability is the function malloc of the component DICOM Fi… |
CVE-2025-29913 | Critical | 9.8 | 2025-03-17 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between… |
CVE-2025-29912 | Critical | 9.8 | 2025-03-17 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between… |
CVE-2025-29909 | Critical | 9.8 | 2025-03-17 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between… |
CVE-2024-10838 | Critical | 9.1 | 2025-03-12 | An integer underflow during deserialization may allow any unauthenticated user to read out of bounds heap memory. This may result into secret data or pointers… |
CVE-2022-49650 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bam_dma: fix runtime PM underflow Commit dbad41e7bb5f ("dmaengine: qcom… |
CVE-2022-49564 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - add param check for DH Reject requests with a source buffer that is bigger… |
CVE-2022-49563 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - add param check for RSA Reject requests with a source buffer that is bigger… |
CVE-2022-49280 | Critical | 9.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: NFSD: prevent underflow in nfssvc_decode_writeargs() Smatch complains: fs/nfsd/nfsxdr.c… |
CVE-2022-49278 | High | 7.1 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: Fix count check in rproc_coredump_write() Check count for 0, to avoid a poten… |
CVE-2022-49208 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent some integer underflows My static checker complains that: driver… |
CVE-2022-49199 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit() This code checks "… |
CVE-2025-0728 | High | 7.5 | 2025-02-21 | In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause an integer underflow and a subsequent denial of ser… |
CVE-2025-0727 | High | 7.5 | 2025-02-21 | In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause an integer underflow and a subsequent denial of ser… |
CVE-2025-21376 | High | 8.1 | 2025-02-11 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2025-21160 | High | 7.8 | 2025-02-11 | Illustrator versions 29.1, 28.7.3 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execu… |
CVE-2025-21156 | High | 7.8 | 2025-02-11 | InCopy versions 20.0, 19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution… |
CVE-2025-21158 | High | 7.8 | 2025-02-11 | InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary c… |
CVE-2025-21135 | High | 7.8 | 2025-01-14 | Animate versions 24.0.6, 23.0.9 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code executi… |
CVE-2025-21134 | High | 7.8 | 2025-01-14 | Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code exec… |
CVE-2025-21133 | High | 7.8 | 2025-01-14 | Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code exec… |
CVE-2025-21122 | High | 7.8 | 2025-01-14 | Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code… |
CVE-2025-21276 | High | 7.5 | 2025-01-14 | Windows MapUrlToZone Denial of Service Vulnerability |
CVE-2024-57843 | Critical | 9.8 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix overflow inside virtnet_rq_alloc When the frag just got a page, then may… |
CVE-2024-57823 | Critical | 9.3 | 2025-01-10 | In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in raptor_uri_normalize_path(). |
CVE-2024-55627 | Medium | 5.9 | 2025-01-06 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a specially crafted TCP s… |
CVE-2024-56375 | High | 7.5 | 2024-12-22 | An integer underflow was discovered in Fort 1.6.3 and 1.6.4 before 1.6.5. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (vi… |
CVE-2024-49103 | Medium | 4.3 | 2024-12-12 | Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability |
CVE-2024-49077 | Medium | 6.8 | 2024-12-12 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
CVE-2024-47606 | Critical | 9.8 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_theora_extens… |
CVE-2024-47546 | High | 7.5 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extract_cc_from_data function within qtd… |
CVE-2024-47545 | High | 7.5 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in qtdemux_parse_trak function within qtdem… |
CVE-2024-11950 | High | 8.8 | 2024-12-12 | XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary c… |
CVE-2024-53955 | High | 7.8 | 2024-12-10 | Bridge versions 14.1.3, 15.0 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution… |
CVE-2024-53954 | High | 7.8 | 2024-12-10 | Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code executi… |
CVE-2024-52989 | High | 7.8 | 2024-12-10 | Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code executi… |
CVE-2024-52987 | High | 7.8 | 2024-12-10 | Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code executi… |
CVE-2024-52986 | High | 7.8 | 2024-12-10 | Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code executi… |
CVE-2024-52985 | High | 7.8 | 2024-12-10 | Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code executi… |
CVE-2024-52984 | High | 7.8 | 2024-12-10 | Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code executi… |
CVE-2024-54095 | High | 7.8 | 2024-12-10 | A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 10). The affected application is vulnerable to integer underflow vulnera… |
CVE-2024-52558 | Medium | 5.3 | 2024-12-06 | The affected product is vulnerable to an integer underflow. An unauthenticated attacker could send a malformed HTTP request, which could allow the attacker to… |
CVE-2018-9388 | Critical | 9.8 | 2024-12-05 | In store_upgrade and store_cmd of drivers/input/touchscreen/stm/ftm4_pdc.c, there are out of bound writes due to missing bounds checks or integer underflows. T… |
CVE-2018-5852 | High | 8.4 | 2024-11-26 | An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/i… |
CVE-2024-11477 | High | 7.8 | 2024-11-22 | 7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af… |
CVE-2024-53081 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: media: ar0521: don't overflow when checking PLL values The PLL checks are comparing 64 bi… |
CVE-2024-53061 | High | 7.3 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: media: s5p-jpeg: prevent buffer overflows The current logic allows word to be less than 2… |
CVE-2024-50290 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: media: cx24116: prevent overflows on SNR calculus as reported by Coverity, if reading SNR… |
CVE-2024-49514 | High | 7.8 | 2024-11-12 | Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary cod… |
CVE-2024-50258 | Medium | 5.5 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: net: fix crash when config small gso_max_size/gso_ipv4_max_size Config a small gso_max_si… |
CVE-2024-20474 | Medium | 4.3 | 2024-10-23 | A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause… |
CVE-2024-47425 | High | 7.8 | 2024-10-09 | Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary cod… |
CVE-2024-46759 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (adc128d818) Fix underflows seen when writing limit attributes DIV_ROUND_CLOSEST()… |
CVE-2024-46730 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Ensure array index tg_inst won't be -1 [WHY & HOW] tg_inst will be a neg… |
CVE-2024-6258 | Medium | 6.8 | 2024-09-13 | BT: Missing length checks of net_buf in rfcomm_handle_data |
CVE-2024-41857 | High | 7.8 | 2024-09-13 | Illustrator versions 28.6, 27.9.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execu… |
CVE-2024-43867 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: prime: fix refcount underflow Calling nouveau_bo_ref() on a nouveau_bo witho… |
CVE-2024-38063 | Critical | 9.8 | 2024-08-13 | Windows TCP/IP Remote Code Execution Vulnerability |
CVE-2022-48828 | Critical | 9.1 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix ia_size underflow iattr::ia_size is a loff_t, which is a signed 64-bit type. NF… |
CVE-2022-48804 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: vt_ioctl: fix array_index_nospec in vt_setactivate array_index_nospec ensures that an out… |
CVE-2024-38517 | High | 7.8 | 2024-07-09 | Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader… |
CVE-2024-38074 | Critical | 9.8 | 2024-07-09 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
CVE-2024-38050 | High | 7.8 | 2024-07-09 | Windows Workstation Service Elevation of Privilege Vulnerability |
CVE-2024-37986 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-37981 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-37975 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-37974 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-21466 | Medium | 6.5 | 2024-07-01 | Information disclosure while parsing sub-IE length during new IE generation. |
CVE-2024-6285 | High | 7.5 | 2024-06-24 | Integer Underflow (Wrap or Wraparound) vulnerability in Renesas arm-trusted-firmware. An integer underflow in image range check calculations could lead to bypa… |
CVE-2024-30070 | High | 7.5 | 2024-06-11 | DHCP Server Service Denial of Service Vulnerability |
CVE-2024-5256 | Medium | 4.3 | 2024-06-06 | Sonos Era 100 SMB2 Message Handling Integer Underflow Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose se… |
CVE-2024-32975 | Medium | 5.9 | 2024-06-04 | Envoy is a cloud-native, open source edge and service proxy. There is a crash at `QuicheDataReader::PeekVarInt62Length()`. It is caused by integer underflow in… |
CVE-2021-47555 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net: vlan: fix underflow for the real_dev refcnt Inject error before dev_hold(real_dev) i… |
CVE-2023-52705 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix underflow in second superblock position calculations Macro NILFS_SB2_OFFSET_B… |
CVE-2024-35980 | High | 8.4 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Fix TLBI RANGE operand KVM/arm64 relies on TLBI RANGE feature to flush TLBs w… |
CVE-2024-30011 | Medium | 6.5 | 2024-05-14 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2024-30008 | Medium | 5.5 | 2024-05-14 | Windows DWM Core Library Information Disclosure Vulnerability |
CVE-2023-42118 | High | 8.8 | 2024-05-03 | Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected… |
CVE-2022-48665 | High | 7.1 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: exfat: fix overflow for large capacity partition Using int type for sector index, there w… |
CVE-2022-48643 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain() syzbot i… |
CVE-2024-32040 | High | 8.1 | 2024-04-22 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 and have connecti… |
CVE-2024-26913 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dcn35 8k30 Underflow/Corruption Issue [why] odm calculation is missi… |
CVE-2024-26828 | Critical | 9.4 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_server_interfaces() In this loop, we step through the buffer… |
CVE-2024-28945 | High | 8.8 | 2024-04-09 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2024-28933 | High | 8.8 | 2024-04-09 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2024-28930 | High | 8.8 | 2024-04-09 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2024-26244 | High | 8.8 | 2024-04-09 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-26208 | High | 7.2 | 2024-04-09 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2024-3077 | Medium | 6.8 | 2024-03-29 | An malicious BLE device can crash BLE victim device by sending malformed gatt packet |
CVE-2021-46951 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: tpm: efi: Use local variable for calculating final log size When tpm_read_log_efi is call… |
CVE-2024-24474 | High | 8.8 | 2024-02-20 | QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of… |
CVE-2024-23313 | Critical | 9.8 | 2024-02-20 | An integer underflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially… |