CWE-191 · Integer Underflow (page 5)
Page 5 of 7 — CVEs classified under CWE-191, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-37974 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-21466 | Medium | 6.5 | 2024-07-01 | Information disclosure while parsing sub-IE length during new IE generation. |
CVE-2024-6285 | High | 7.5 | 2024-06-24 | Integer Underflow (Wrap or Wraparound) vulnerability in Renesas arm-trusted-firmware. An integer underflow in image range check calculations could lead to bypa… |
CVE-2024-30070 | High | 7.5 | 2024-06-11 | DHCP Server Service Denial of Service Vulnerability |
CVE-2024-5256 | Medium | 4.3 | 2024-06-06 | Sonos Era 100 SMB2 Message Handling Integer Underflow Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose se… |
CVE-2024-32975 | Medium | 5.9 | 2024-06-04 | Envoy is a cloud-native, open source edge and service proxy. There is a crash at `QuicheDataReader::PeekVarInt62Length()`. It is caused by integer underflow in… |
CVE-2021-47555 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net: vlan: fix underflow for the real_dev refcnt Inject error before dev_hold(real_dev) i… |
CVE-2023-52705 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix underflow in second superblock position calculations Macro NILFS_SB2_OFFSET_B… |
CVE-2024-35980 | High | 8.4 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Fix TLBI RANGE operand KVM/arm64 relies on TLBI RANGE feature to flush TLBs w… |
CVE-2024-30011 | Medium | 6.5 | 2024-05-14 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2024-30008 | Medium | 5.5 | 2024-05-14 | Windows DWM Core Library Information Disclosure Vulnerability |
CVE-2023-42118 | High | 8.8 | 2024-05-03 | Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected… |
CVE-2022-48665 | High | 7.1 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: exfat: fix overflow for large capacity partition Using int type for sector index, there w… |
CVE-2022-48643 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain() syzbot i… |
CVE-2024-32040 | High | 8.1 | 2024-04-22 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 and have connecti… |
CVE-2024-26913 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dcn35 8k30 Underflow/Corruption Issue [why] odm calculation is missi… |
CVE-2024-26828 | Critical | 9.4 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_server_interfaces() In this loop, we step through the buffer… |
CVE-2024-28945 | High | 8.8 | 2024-04-09 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2024-28933 | High | 8.8 | 2024-04-09 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2024-28930 | High | 8.8 | 2024-04-09 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2024-26244 | High | 8.8 | 2024-04-09 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-26208 | High | 7.2 | 2024-04-09 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2024-3077 | Medium | 6.8 | 2024-03-29 | An malicious BLE device can crash BLE victim device by sending malformed gatt packet |
CVE-2021-46951 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: tpm: efi: Use local variable for calculating final log size When tpm_read_log_efi is call… |
CVE-2024-24474 | High | 8.8 | 2024-02-20 | QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of… |
CVE-2024-23313 | Critical | 9.8 | 2024-02-20 | An integer underflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially… |
CVE-2024-0808 | Critical | 9.8 | 2024-01-24 | Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chro… |
CVE-2024-0565 | Medium | 6.8 | 2024-01-15 | An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This… |
CVE-2024-21309 | High | 7.8 | 2024-01-09 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2023-39414 | High | 7.0 | 2024-01-08 | Multiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation functionality of GTKWave 3.3.115. A specially crafted .lxt2 fil… |
CVE-2023-39413 | High | 7.0 | 2024-01-08 | Multiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation functionality of GTKWave 3.3.115. A specially crafted .lxt2 fil… |
CVE-2023-48298 | Medium | 5.9 | 2023-12-21 | ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. This vulnerability is an… |
CVE-2023-43628 | Medium | 5.9 | 2023-12-05 | An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1~dev. A specially crafted network packet can lead to memory c… |
CVE-2023-47360 | High | 7.5 | 2023-11-07 | Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length. |
CVE-2023-33059 | High | 7.8 | 2023-11-07 | Memory corruption in Audio while processing the VOC packet data from ADSP. |
CVE-2023-31102 | High | 7.8 | 2023-11-03 | Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive. |
CVE-2023-5753 | Medium | 6.3 | 2023-10-25 | Potential buffer overflows in the Bluetooth subsystem due to asserts being disabled in /subsys/bluetooth/host/hci_core.c |
CVE-2023-22308 | High | 7.5 | 2023-10-12 | An integer underflow vulnerability exists in the vpnserver OvsProcessData functionality of SoftEther VPN 5.01.9674 and 5.02. A specially crafted network packet… |
CVE-2023-36785 | High | 7.8 | 2023-10-10 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-44378 | High | 7.1 | 2023-10-09 | gnark is a zk-SNARK library that offers a high-level API to design circuits. Prior to version 0.9.0, for some in-circuit values, it is possible to construct tw… |
CVE-2023-32653 | Critical | 9.8 | 2023-09-25 | An out-of-bounds write vulnerability exists in the dcm_pixel_data_decode functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead… |
CVE-2023-38162 | High | 7.5 | 2023-09-12 | DHCP Server Service Denial of Service Vulnerability |
CVE-2023-36796 | High | 7.8 | 2023-09-12 | Visual Studio Remote Code Execution Vulnerability |
CVE-2023-36794 | High | 7.8 | 2023-09-12 | Visual Studio Remote Code Execution Vulnerability |
CVE-2023-40181 | Medium | 5.3 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Integer-Underflow… |
CVE-2023-39350 | Medium | 5.9 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. This issue affects Clients only. Integer underflow le… |
CVE-2023-36909 | Medium | 6.5 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-35387 | High | 8.8 | 2023-08-08 | Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability |
CVE-2022-28733 | High | 8.1 | 2023-07-20 | Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_net_recv_ip4_packets() function on rsm->… |
CVE-2023-38427 | Critical | 9.8 | 2023-07-18 | An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemble_neg_co… |
CVE-2023-33158 | High | 7.8 | 2023-07-11 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2023-35790 | High | 7.5 | 2023-06-16 | An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an i… |
CVE-2023-29349 | High | 7.8 | 2023-06-16 | Microsoft ODBC and OLE DB Remote Code Execution Vulnerability |
CVE-2023-32014 | Critical | 9.8 | 2023-06-14 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
CVE-2023-24817 | High | 7.5 | 2023-05-30 | RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2023.0… |
CVE-2023-31137 | High | 7.5 | 2023-05-09 | MaraDNS is open-source software that implements the Domain Name System (DNS). In version 3.5.0024 and prior, a remotely exploitable integer underflow vulnerabi… |
CVE-2023-24821 | High | 7.5 | 2023-04-24 | RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 20… |
CVE-2023-24820 | High | 7.5 | 2023-04-24 | RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. An attacker can sen… |
CVE-2023-21630 | High | 8.4 | 2023-04-13 | Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal. |
CVE-2023-26421 | High | 7.8 | 2023-04-12 | Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Integer Underflow or Wraparound vulnerability that c… |
CVE-2023-28293 | High | 7.8 | 2023-04-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-28272 | High | 7.8 | 2023-04-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-28250 | Critical | 9.8 | 2023-04-11 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
CVE-2023-28247 | High | 7.5 | 2023-04-11 | Windows Network File System Information Disclosure Vulnerability |
CVE-2023-24887 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24911 | Medium | 4.3 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-24864 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability |
CVE-2023-21708 | Critical | 9.8 | 2023-03-14 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2023-20635 | Medium | 4.4 | 2023-03-07 | In keyinstall, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure with System execution pri… |
CVE-2023-21815 | High | 7.8 | 2023-02-14 | Visual Studio Remote Code Execution Vulnerability |
CVE-2023-21718 | High | 7.8 | 2023-02-14 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-21684 | High | 8.8 | 2023-02-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2022-38681 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2023-0469 | Medium | 5.5 | 2023-01-26 | A use-after-free flaw was found in io_uring/filetable.c in io_install_fixed_file in the io_uring subcomponent in the Linux Kernel during call cleanup. This fla… |
CVE-2023-21681 | High | 8.8 | 2023-01-10 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2023-21556 | High | 8.1 | 2023-01-10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability |
CVE-2023-21527 | High | 7.5 | 2023-01-10 | Windows iSCSI Service Denial of Service Vulnerability |
CVE-2022-4338 | Critical | 9.8 | 2023-01-10 | An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch. |
CVE-2022-44444 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-20516 | High | 7.5 | 2022-12-16 | In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disc… |
CVE-2022-20483 | High | 7.5 | 2022-12-13 | In several functions that parse avrc response in avrc_pars_ct.cc and related files, there are possible out of bounds reads due to integer overflows. This could… |
CVE-2022-37301 | High | 7.5 | 2022-11-22 | A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations w… |
CVE-2022-39343 | Medium | 5.6 | 2022-11-08 | Azure RTOS FileX is a FAT-compatible file system that’s fully integrated with Azure RTOS ThreadX. In versions before 6.2.0, the Fault Tolerant feature of Azure… |
CVE-2022-3165 | Medium | 6.5 | 2022-10-17 | An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended format. A malicious client could use this f… |
CVE-2022-39293 | High | 8.6 | 2022-10-13 | Azure RTOS USBX is a high-performance USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. The case is, in [… |
CVE-2022-36063 | High | 7.6 | 2022-10-10 | Azure RTOS USBx is a USB host, device, and on-the-go (OTG) embedded stack, fully integrated with Azure RTOS ThreadX and available for all Azure RTOS ThreadX–su… |
CVE-2022-27492 | High | 7.8 | 2022-09-23 | An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file. |
CVE-2022-20393 | Medium | 5.5 | 2022-09-13 | In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local informati… |
CVE-2022-2869 | Medium | 5.5 | 2022-08-17 | libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies… |
CVE-2022-2867 | Medium | 5.5 | 2022-08-17 | libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop (likely… |
CVE-2022-2335 | High | 7.5 | 2022-08-17 | A crafted HTTP packet with a -1 content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22. |
CVE-2021-25121 | Medium | 6.5 | 2022-06-20 | The Rating by BestWebSoft WordPress plugin before 1.6 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service… |
CVE-2021-40589 | Critical | 9.8 | 2022-06-08 | ZAngband zangband-data 2.7.5 is affected by an integer underflow vulnerability in src/tk/plat.c through the variable fileheader.bfOffBits. |
CVE-2022-30787 | Medium | 6.7 | 2022-05-26 | An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite. |
CVE-2022-29204 | Medium | 5.5 | 2022-05-20 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.UnsortedSegment… |
CVE-2022-1698 | High | 7.5 | 2022-05-12 | Allowing long password leads to denial of service in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS att… |
CVE-2021-44509 | High | 7.5 | 2022-04-15 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers can cause an integer underflow of the s… |
CVE-2021-44489 | High | 7.5 | 2022-04-15 | An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause an integer underflow of the size of calls to memset in… |
CVE-2022-20073 | Medium | 6.6 | 2022-04-11 | In preloader (usb), there is a possible out of bounds write due to a integer underflow. This could lead to local escalation of privilege, for an attacker who h… |
CVE-2021-40054 | High | 7.5 | 2022-03-10 | There is an integer underflow vulnerability in the atcmdserver module. Successful exploitation of this vulnerability may affect integrity. |