CWE-190

Medium likelihood

Integer Overflow or Wraparound

Parent: CWE-682 - Incorrect Calculation

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

3,172 vulnerabilities with CWE-190
CVE-2026-10999 MEDIUM
Google Chrome < 149.0.7827.53 - Integer Overflow in ANGLE
CVSS 6.5
CVE-2026-10924 HIGH
Google Chrome - External Control of Assumed-Immutable Web Parameter
CVSS 8.3
CVE-2026-10921 HIGH
Google Chrome - External Control of Assumed-Immutable Web Parameter
CVSS 8.3
CVE-2026-49510 MEDIUM
Samsung Open Source Rlottie - Integer Overflow or Wraparound
CVSS 6.1
CVE-2026-37462 HIGH
gobgp v4.3.0 - Denial of Service via BGP UPDATE Message Integer Underflow
CVSS 7.5
CVE-2026-10722 LOW
cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow
CVSS 3.3
CVE-2026-45686 HIGH
OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI
CVSS 7.5
CVE-2026-0095 HIGH
Google Android - Integer Overflow or Wraparound
CVSS 8.0
CVE-2026-0080 MEDIUM
Google Android - Integer Overflow or Wraparound
CVSS 6.5
CVE-2026-0079 MEDIUM
Android 14-16 UBSan Runtime - Local Integer Overflow Denial of Service
CVSS 5.5
CVE-2026-0052 MEDIUM
Android 14-16 UBSan Runtime - Remote Integer Overflow Denial of Service
CVSS 6.5
CVE-2026-0044 MEDIUM
Android 14-16 UBSan Runtime - Remote System Crash via Integer Overflow
CVSS 6.5
CVE-2026-0043 MEDIUM
Android 14-16 UBSan Runtime - Local Integer Overflow Privilege Escalation
CVSS 5.5
CVE-2026-0041 MEDIUM
Android 14-16 UBSan Runtime - Remote UBSan Failure Denial of Service
CVSS 6.5
CVE-2026-0040 MEDIUM
Android 14-16 UBSan Runtime - Remote Crash via Integer Overflow
CVSS 6.5
CVE-2026-0039 MEDIUM
Android 14-16 UBSan Runtime - Remote Integer Overflow Denial of Service
CVSS 6.5
CVE-2026-10268 LOW
janet-lang janet marsh.c unmarshal_one_fiber integer overflow
CVSS 3.3
CVE-2026-10118 HIGH
Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication
CVSS 7.8
CVE-2026-46384 HIGH
iskorotkov/avro: Integer Overflow in Avro Decoder
CVE-2026-9882 MEDIUM
Google Chrome - External Control of Assumed-Immutable Web Parameter
CVSS 6.5
CVE-2026-46198 HIGH
batman-adv: fix integer overflow on buff_pos
CVSS 8.8
CVE-2026-48065 MEDIUM
pam_usb: Unchecked integer multiplication before xmalloc() in conf.c allows heap-based buffer overflow on 32-bit targets
CVSS 6.7
CVE-2026-44983 HIGH
smallbitvec: Safe API Triggered Heap Buffer Overflow via Integer Overflow
CVSS 7.3
CVE-2026-48691 CRITICAL
FastNetMon Community Edition <= 1.2.9 - Heap Buffer Overflow in BGP AS_PATH Attribute Encoder
CVSS 9.8
CVE-2026-48690 HIGH
FastNetMon Community Edition <= 1.2.9 - Integer Overflow in Packet Capture Buffer Allocation
CVSS 7.1
Details
Vulnerabilities 3,172
Exploit Likelihood Medium