CWE-190

Medium likelihood

Integer Overflow or Wraparound

Parent: CWE-682 - Incorrect Calculation

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

3,209 vulnerabilities with CWE-190
CVE-2018-5295 MEDIUM
PoDoFo 0.9.5 - Denial of Service via Integer Overflow in PdfXRefStreamParserObject
CVSS 5.5
CVE-2018-5294 MEDIUM
libming 0.4.8 - Denial of Service via Integer Overflow in readUInt32
CVSS 6.5
CVE-2017-13318 MEDIUM
Android - Remote Information Disclosure via Integer Overflow in HeifDataSource::readAt
CVSS 5.7
CVE-2017-13323 HIGH
Android - Integer Overflow to Out-of-Bounds Write in String16.cpp
CVSS 7.8
CVE-2017-20005 CRITICAL
NGINX < 1.13.6 - Buffer Overflow in Autoindex Module via Four-Digit Year Handling
CVSS 9.8
CVE-2017-18651 HIGH
Samsung M(6.x)N(7.x) - Memory Corruption
CVSS 7.5
CVE-2017-5333 HIGH
icoutils < 0.31.1 - Integer Overflow in extract_group_icon_cursor_resource
CVSS 7.8
CVE-2017-5331 HIGH
icoutils < 0.31.1 - Integer Overflow in check_offset Function
CVSS 7.8
CVE-2017-18279 HIGH
Qualcomm Small Cell SoC, Snapdragon Mobile, Snapdragon Wear - Buffer Overflow in Camera Module
CVSS 7.8
CVE-2017-18173 HIGH
Qualcomm Snapdragon Mobile Firmware - Integer Underflow via Invalid Android Verified Boot Signature
CVSS 7.8
CVE-2017-18172 HIGH
Qualcomm Snapdragon Firmware - Integer Overflow in System UI Buffer Size Check
CVSS 7.8
CVE-2017-15828 HIGH
Android - Integer Overflow in Keystore Access
CVSS 7.8
CVE-2017-15818 HIGH
Android - Integer Overflow in QSEECOM User Application Loading
CVSS 7.8
CVE-2017-2777 HIGH
Iceni Argus 6.6.05 - Heap Overflow via Crafted PDF File
CVSS 8.8
CVE-2017-15422 MEDIUM
Google Chrome < 63.0.3239.84 - Integer Overflow
CVSS 6.5
CVE-2017-9120 CRITICAL
PHP 7.0.0-7.1.5 - Denial of Service via Integer Overflow in mysqli_real_escape_string
CVSS 9.8
CVE-2017-7482 HIGH
Linux kernel <4.12 - Privilege Escalation
CVSS 7.8
CVE-2017-7657 CRITICAL
Eclipse Jetty <9.2.x, 9.3.x - Buffer Overflow
CVSS 9.8
CVE-2017-18070 HIGH
Android - Heap Overflow in wma_ndp_end_response_event_handler()
CVSS 7.8
CVE-2017-15854 HIGH
Android - Buffer Overflow in wma_radio_chan_stats_event_handler()
CVSS 7.8
CVE-2017-5428 CRITICAL
Firefox <52.0.1 - Integer Overflow
CVSS 9.8
CVE-2017-6290 HIGH
Android - Local Privilege Escalation via Integer Overflow in NVIDIA TLK TrustZone
CVSS 7.8
CVE-2017-2918 HIGH
Blender 2.78c - Integer Overflow and Buffer Overflow via Crafted .blend File
CVSS 7.8
CVE-2017-2908 HIGH
Blender 2.78c - Remote Code Execution via Crafted .blend File Thumbnail
CVSS 7.8
CVE-2017-2907 HIGH
Blender 2.78c - Remote Code Execution via Crafted AVI File
CVSS 7.8
Details
Vulnerabilities 3,209
Exploit Likelihood Medium