CWE-190

Medium likelihood

Integer Overflow or Wraparound

Parent: CWE-682 - Incorrect Calculation

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

3,210 vulnerabilities with CWE-190
CVE-2016-5094 HIGH
PHP < 5.5.36 and 5.6.x < 5.6.22 - Integer Overflow in php_html_entities
CVSS 8.6
CVE-2016-3078 CRITICAL
PHP < 7.0.6 - Integer Overflow in ZipArchive getFromIndex and getFromName
CVSS 9.8
CVE-2016-5261 HIGH
Firefox < 47.0.1 - Remote Code Execution via WebSocketChannel Integer Overflow
CVSS 8.8
CVE-2016-5138 HIGH
Google Chrome < 52.0.2743.82 - Integer Overflow in kbasep_vinstr_attach_client
CVSS 8.8
CVE-2016-6289 HIGH
PHP < 5.5.37 - Denial of Service via Integer Overflow in ZIP Archive Extraction
CVSS 7.8
CVE-2016-2068 HIGH
Android < 6.0.1 and Linux Kernel 3.0-3.19.8 - Integer Overflow in MSM QDSP6 Audio Driver
CVSS 7.8
CVE-2016-2177 CRITICAL
HP Icewall Mcrp - Integer Overflow
CVSS 9.8
CVE-2016-4346 CRITICAL
PHP < 7.0.4 - Integer Overflow in str_pad Function
CVSS 9.8
CVE-2016-4345 CRITICAL
PHP < 7.0.4 - Denial of Service via Integer Overflow in php_filter_encode_url
CVSS 9.8
CVE-2016-4344 CRITICAL
PHP 7.0.0-7.0.3 - Integer Overflow in utf8_encode via Long Argument
CVSS 9.8
CVE-2016-3712 MEDIUM
Oracle VM Server - Denial of Service via VGA Register Integer Overflow
CVSS 5.5
CVE-2016-2062 HIGH
Linux Kernel 3.0-3.19.8 - Denial of Service via Adreno GPU Driver IOCTL_KGSL_PERFCOUNTER_QUERY
CVSS 7.8
CVE-2016-2105 HIGH
Redhat Enterprise Linux Desktop < 5.6.30 - Integer Overflow
CVSS 7.5
CVE-2016-1753 HIGH
Apple iOS <9.3, macOS <10.11.4, tvOS <9.2, watchOS <2.2 - Integer Overflow to Privileged Code Execution
CVSS 7.8
CVE-2016-1010 HIGH KEV
Adobe Flash Player < 18.0.0.333, 19.x-21.x < 21.0.0.182, < 11.2.202.577 - Remote Code Execution via Integer Overflow
CVSS 8.8
CVE-2016-0993 HIGH
Adobe Flash Player <18.0.0.333,19.x-21.x - RCE
CVSS 8.8
CVE-2016-0963 HIGH
Adobe Flash Player <18.0.0.333,19.x-21.x<21.0.0.182,11.2.202.577 - RCE
CVSS 8.8
CVE-2016-2326 HIGH
Debian Linux < 2.8.4 - Integer Overflow
CVSS 8.8
CVE-2015-8751 HIGH
JasPer < 1.900.4 - Integer Overflow in jas_matrix_create
CVSS 8.8
CVE-2015-1530 HIGH
Android < 5.1 - Remote Code Execution via Invalid Array Size in IAudioPolicyService
CVSS 7.8
CVE-2015-4042 CRITICAL
GNU Coreutils < 8.23 - Integer Overflow in sort keycompare_mb Function
CVSS 9.8
CVE-2015-5297 MEDIUM
pixman < 0.32.8 - Integer Overflow in general_composite_rect()
CVSS 6.7
CVE-2015-9220 CRITICAL
Qualcomm Snapdragon Mobile and Wear Firmware - Integer Overflow in Firmware Image Size Encoding
CVSS 9.8
CVE-2015-9219 CRITICAL
Qualcomm SD 400 and SD 800 Firmware - Integer Overflow to Buffer Overflow in DRM API
CVSS 9.8
CVE-2015-9201 CRITICAL
Qualcomm MDM9206 and Snapdragon Firmware - Integer Overflow in tzbsp
CVSS 9.8
Details
Vulnerabilities 3,210
Exploit Likelihood Medium