CWE-681 · Incorrect Conversion between Numeric Types

133 CVEs classified under CWE-681 (Incorrect Conversion between Numeric Types). Browse by severity and year.

Top CVEs for CWE-681
CVESeverityScorePublishedSummary
CVE-2022-40138Critical9.82022-10-11An integer conversion error in Hermes bytecode generation, prior to commit 6aa825e480d48127b480b08d13adf70033237097, could have been used to perform Out-Of-Bou…
CVE-2021-36357Critical9.82021-10-22An issue was discovered in OpenPOWER 2.6 firmware. unpack_timestamp() calls le32_to_cpu() for endian conversion of a uint16_t "year" value, resulting in a type…
CVE-2021-38187Critical9.82021-08-08An issue was discovered in the anymap crate through 0.12.1 for Rust. It violates soundness via conversion of a *u8 to a *u64.
CVE-2020-35926Critical9.82020-12-31An issue was discovered in the nanorand crate before 0.5.1 for Rust. It caused any random number generator (even ChaCha) to return all zeroes because integer t…
CVE-2019-19317Critical9.82019-12-05lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of ser…
CVE-2019-14842Critical9.82019-11-26Structured reply is a feature of the newstyle NBD protocol allowing the server to send a reply in chunks. A bounds check which was supposed to test for chunk o…
CVE-2018-8786Critical9.82018-11-29FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_update() and result…
CVE-2016-3074Critical9.82016-04-26Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentially execute…
CVE-2022-36025Critical9.12022-09-24Besu is a Java-based Ethereum client. In versions newer than 22.1.3 and prior to 22.7.1, Besu is subject to an Incorrect Conversion between Numeric Types. An e…
CVE-2026-26178High8.82026-04-14Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized attacker to elevate privileges locally.
CVE-2026-21693High8.82026-01-07iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color manage…
CVE-2026-21688High8.82026-01-07iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color manage…
CVE-2024-49093High8.82024-12-12Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2024-26162High8.82024-03-12Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2023-24884High8.82023-04-11Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-23388High8.82023-03-14Windows Bluetooth Driver Elevation of Privilege Vulnerability
CVE-2021-21861High8.82021-08-16An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. When pr…
CVE-2021-21860High8.82021-08-16An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A speci…
CVE-2021-23997High8.82021-06-24Due to unexpected data type conversions, a use-after-free could have occurred when interacting with the font cache. We presume that with enough effort this cou…
CVE-2020-12417High8.82020-07-09Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a potentially exploitab…
All CVEs classified under CWE-681 — newest first (page 1 of 2)
CVESeverityScorePublishedSummary
CVE-2026-84966Medium5.12026-09-03An incorrect numeric type conversion in the BSON document building component of the MongoDB C++ Driver may cause a length value to be interpreted incorrectly…
CVE-2026-84963Medium5.32026-09-03An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusually large text value to be silently sho…
CVE-2026-84970Medium6.22026-09-03A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++ Driver's BSON library. An actor who controls the text that an embedding a…
CVE-2026-82522Medium5.42026-09-02libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers to inject arbitrary metadata by exploit…
CVE-2026-82457High7.82026-08-29su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uid_t and gid_t, allowing truncation of out-of-…
CVE-2026-75145Medium5.82026-08-19FFmpeg before commit b4c199c contains an incorrect integer narrowing conversion in the AV1 RTP packetizer (libavformat/rtpenc_av1.c). The OBU size is cast to l…
CVE-2026-19879Medium5.32026-08-14A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The `writeString()` method performs a silent narrowing cast from 16…
CVE-2026-6426Medium4.42026-08-10A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The destination buffer size is stored as a uint64_t but read by th…
CVE-2026-21069High7.82026-08-10Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-557682026-07-30GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. Prior to version 1.11, the buil…
CVE-2026-55123High7.82026-07-14Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2026-50402High7.82026-07-14Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-53466Medium6.52026-07-01ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, an integer overflow in…
CVE-2026-45258High7.82026-06-27dsp_mmap_single() validated the requested mapping by checking the sum of the user-supplied offset and length against the buffer size. This addition could over…
CVE-2026-53133High7.82026-06-25In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Fix truncation for block sizes >= 4G When the iommu is used the linearization…
CVE-2026-53923High7.52026-06-22vLLM is an inference and serving engine for large language models (LLMs). From 0.5.5 until 0.23.1rc0, integer truncation of tensor dimensions in vLLM's GGUF de…
CVE-2026-9143Low3.72026-06-19There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen.  This may silently discard high…
CVE-2026-24192High7.82026-05-26NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion between numeric types, leading to a heap buffer…
CVE-2026-26178High8.82026-04-14Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized attacker to elevate privileges locally.
CVE-2026-34945Medium6.52026-04-09Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Winch compiler contains a bug where a 64-bit table, part of…
CVE-2026-24174High7.52026-04-07NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request to the server. A successful…
CVE-2026-4931High8.62026-04-07Smart contract Marginal v1 performs unsafe downcast, allowing attackers to settle a large debt position for a negligible asset cost.
CVE-2026-34610Medium5.92026-04-02The leancrypto library is a cryptographic library that exclusively contains only PQC-resistant cryptographic algorithms. Prior to version 1.7.1, lc_x509_extrac…
CVE-2026-34550Medium6.22026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is an Undefined Behavior (UB) cond…
CVE-2026-34548Medium6.22026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is an Undefined Behavior (UB) cond…
CVE-2026-4602High7.52026-03-23Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to handling negative exponents in ext/jsbn2.js…
CVE-2026-27691Medium6.22026-02-25iccDEV provides a set of libraries and tools for working with ICC color management profiles. In versions up to and including 2.3.1.4, signed integer overflow i…
CVE-2026-25989High7.52026-02-24ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted SVG file can…
CVE-2026-24856High7.82026-01-28iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Versions prior to…
CVE-2025-71002Medium6.52026-01-28A floating-point exception (FPE) in the flow.column_stack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2026-21693High8.82026-01-07iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color manage…
CVE-2026-21688High8.82026-01-07iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color manage…
CVE-2026-21673High7.82026-01-06iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have overflows and underflows in CIccXml…
CVE-2025-10543Medium5.32025-12-02In Eclipse Paho Go MQTT v3.1 library (paho.mqtt.golang) versions <=1.5.0 UTF-8 encoded strings, passed into the library, may be incorrectly encoded if their le…
CVE-2025-58063High7.12025-09-09CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerabil…
CVE-2025-53733High8.42025-08-12Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-24059High7.82025-03-11Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2024-49093High8.82024-12-12Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2024-7747Medium6.52024-11-28The Wallet for WooCommerce plugin for WordPress is vulnerable to incorrect conversion between numeric types in all versions up to, and including, 1.5.6. This i…
CVE-2024-38044High7.22024-07-09DHCP Server Service Remote Code Execution Vulnerability
CVE-2024-32481Medium5.32024-04-25Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. Starting in version 0.3.8 and prior to version 0.4.0b1, when looping over a `rang…
CVE-2024-26162High8.82024-03-12Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2024-1552High7.52024-02-20Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.*Note:* This issue only affects 32-bit ARM devices…
CVE-2023-28063Medium6.72024-02-06 Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit t…
CVE-2023-46848High8.62023-11-03Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs…
CVE-2023-5184High7.02023-09-27Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers.
CVE-2023-3635Medium5.92023-07-12GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when h…
CVE-2023-20006High8.62023-06-28A vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense…
CVE-2023-29346High7.82023-06-14NTFS Elevation of Privilege Vulnerability
CVE-2023-24884High8.82023-04-11Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-0185Medium6.72023-04-01NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where sign conversion issuescasting an unsigned primitive to signed may…
CVE-2022-43663High8.12023-03-20An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network pa…
CVE-2023-23401High7.82023-03-14Windows Media Remote Code Execution Vulnerability
CVE-2023-23388High8.82023-03-14Windows Bluetooth Driver Elevation of Privilege Vulnerability
CVE-2023-21736High7.82023-01-10Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2022-34680Medium5.52022-12-30NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an integer truncation can lead to an out-of-bounds read, w…
CVE-2022-34677Medium5.52022-12-30NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause an integer to be tr…
CVE-2022-34670High7.82022-12-30NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors w…
CVE-2022-40225Medium6.52022-11-10A vulnerability has been identified in SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4…
CVE-2022-42324Medium5.52022-11-01Oxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed precision. The Ocaml Xenbus library takes a C uint32_t out of the…
CVE-2022-40138Critical9.82022-10-11An integer conversion error in Hermes bytecode generation, prior to commit 6aa825e480d48127b480b08d13adf70033237097, could have been used to perform Out-Of-Bou…
CVE-2022-36025Critical9.12022-09-24Besu is a Java-based Ethereum client. In versions newer than 22.1.3 and prior to 22.7.1, Besu is subject to an Incorrect Conversion between Numeric Types. An e…
CVE-2022-2639High7.82022-09-01An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a ne…
CVE-2022-34169High7.52022-07-19The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java cl…
CVE-2014-125012Medium5.32022-06-18A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is an unknown function of the file libavcodec/dxtroy.c. The manipulati…
CVE-2014-125011Medium5.32022-06-18A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the function decode_frame of the file libavcode…
CVE-2021-27478High8.22022-05-12A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may cause a denial-of-service…
CVE-2022-27189High7.52022-05-05On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all…
CVE-2022-0322Medium5.52022-03-25A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel with a local user privileg…
CVE-2022-27882High7.52022-03-25slaacd in OpenBSD 6.9 and 7.0 before 2022-03-22 has an integer signedness error and resultant heap-based buffer overflow triggerable by a crafted IPv6 router a…
CVE-2021-32996High7.52022-01-10The FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to crash. A restart is required.
CVE-2021-0964Medium6.52021-12-15In C2SoftMP3::process() of C2SoftMp3Dec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information discl…
CVE-2021-41272High7.52021-12-13Besu is an Ethereum client written in Java. Starting in version 21.10.0, changes in the implementation of the SHL, SHR, and SAR operations resulted in the intr…
CVE-2021-41202Medium5.52021-11-05TensorFlow is an open source platform for machine learning. In affected versions while calculating the size of the output within the `tf.range` kernel, there i…
CVE-2021-36357Critical9.82021-10-22An issue was discovered in OpenPOWER 2.6 firmware. unpack_timestamp() calls le32_to_cpu() for endian conversion of a uint16_t "year" value, resulting in a type…
CVE-2021-21861High8.82021-08-16An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. When pr…
CVE-2021-21860High8.82021-08-16An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A speci…
CVE-2021-37679High7.12021-08-12TensorFlow is an end-to-end open source platform for machine learning. In affected versions it is possible to nest a `tf.map_fn` within another `tf.map_fn` cal…
CVE-2021-37669Medium5.52021-08-12TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause denial of service in applications serving mod…
CVE-2021-37661Medium5.52021-08-12TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause a denial of service in `boosted_trees_create_…
CVE-2021-37646Medium5.52021-08-12TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of `tf.raw_ops.StringNGrams` is vulnerable to an…
CVE-2021-37645Medium5.52021-08-12TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of `tf.raw_ops.QuantizeAndDequantizeV4Grad` is v…
CVE-2021-38187Critical9.82021-08-08An issue was discovered in the anymap crate through 0.12.1 for Rust. It violates soundness via conversion of a *u8 to a *u64.
CVE-2021-32461High7.82021-07-08Trend Micro Password Manager (Consumer) version 5.0.0.1217 and below is vulnerable to an Integer Truncation Privilege Escalation vulnerability which could allo…
CVE-2021-23997High8.82021-06-24Due to unexpected data type conversions, a use-after-free could have occurred when interacting with the font cache. We presume that with enough effort this cou…
CVE-2021-32629High7.22021-05-24Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermediate representation into executable mach…
CVE-2021-29539Low2.52021-05-14TensorFlow is an end-to-end open source platform for machine learning. Calling `tf.raw_ops.ImmutableConst`(https://www.tensorflow.org/api_docs/python/tf/raw_op…
CVE-2020-28588Medium5.52021-05-10An information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux Kernel 5.1 Stable and 5.4.66. More specifically, this issue has…
CVE-2020-15225High7.52021-04-29django-filter is a generic system for filtering Django QuerySets based on user selections. In django-filter before version 2.4.0, automatically generated `Numb…
CVE-2021-3444High7.82021-03-23The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker…
CVE-2021-27219High7.52021-02-15An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an im…
CVE-2021-27218High7.52021-02-15An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit pl…
CVE-2020-13545High7.82021-01-06An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A speci…
CVE-2020-13544High7.82021-01-06An exploitable sign extension vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A speciall…
CVE-2020-35926Critical9.82020-12-31An issue was discovered in the nanorand crate before 0.5.1 for Rust. It caused any random number generator (even ChaCha) to return all zeroes because integer t…
CVE-2020-13985High7.52020-12-11An issue was discovered in Contiki through 3.0. A memory corruption vulnerability exists in the uIP TCP/IP stack component when handling RPL extension headers…
CVE-2019-14563High7.82020-11-23Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2020-27194Medium5.52020-10-16An issue was discovered in the Linux kernel before 5.8.15. scalar32_min_max_or in kernel/bpf/verifier.c mishandles bounds tracking during use of 64-bit values…
CVE-2020-1913High8.12020-09-09An Integer signedness error in the JavaScript Interpreter in Facebook Hermes prior to commit 2c7af7ec481ceffd0d14ce2d7c045e475fd71dc6 allows attackers to cause…
CVE-2020-12417High8.82020-07-09Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a potentially exploitab…