CWE-190

Medium likelihood

Integer Overflow or Wraparound

Parent: CWE-682 - Incorrect Calculation

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

3,173 vulnerabilities with CWE-190
CVE-2026-48690 HIGH
FastNetMon Community Edition <= 1.2.9 - Integer Overflow in Packet Capture Buffer Allocation
CVSS 7.1
CVE-2026-39824 LOW
Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows
CVSS 3.3
CVE-2026-42627 MEDIUM
Arm ArmNN through 2026-03-27 - Heap-Based Buffer Over-Read via Integer Overflow in TensorShape::GetNumElements()
CVSS 6.2
CVE-2026-39834 CRITICAL
Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh
CVSS 9.1
CVE-2026-8631 CRITICAL
HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution
CVSS 9.8
CVE-2026-24214 HIGH
NVIDIA Triton Inference Server < 26.03 - Integer Overflow in DALI Backend
CVSS 8.0
CVE-2026-24210 HIGH
NVIDIA Triton Inference Server < 26.03 - Denial of Service via Integer Overflow
CVSS 7.5
CVE-2026-43618 HIGH
Rsync < 3.4.3 Integer Overflow Information Disclosure
CVSS 8.1
CVE-2026-33642 CRITICAL
Kitty <0.47.0 compose_rectangles - Heap Buffer Over-Read/Write
CVSS 9.9
CVE-2026-8956 CRITICAL
Integer overflow in the Networking: JAR component
CVSS 9.8
CVE-2026-8949 HIGH
Integer overflow in the Widget: Win32 component
CVSS 7.5
CVE-2026-27781 LOW
OpenHarmony < v6.0 - Denial of Service via Integer Overflow
CVSS 3.3
CVE-2026-32849 MEDIUM
NetBSD Signed Integer Overflow in cryptodev_op via cryptodev.c
CVSS 5.5
CVE-2026-44673 HIGH
libyang: lyb_read_string() integer overflow → heap buffer overflow
CVSS 7.5
CVE-2026-44637 HIGH
libsixel: integer overflow in parser
CVSS 7.1
CVE-2026-44636 HIGH
libsixel: integer overflow in encoder
CVSS 7.4
CVE-2026-43909 HIGH
OpenImageIO: Signed integer overflow in SwapRGBABytes loop index leads to out-of-bounds read/write in DPX ABGR decoder
CVSS 8.8
CVE-2026-43908 HIGH
OpenImageIO: Signed integer overflow in ConvertCbYCrYToRGB leads to heap out-of-bounds write in DPX 4:2:2 decoder
CVSS 8.8
CVE-2026-43907 HIGH
OpenImageIO: Integer overflow in QueryRGBBufferSizeInternal leads to heap out-of-bounds write in DPX decoder (kCbYCr and kABGR)
CVSS 8.3
CVE-2026-43905 HIGH
OpenImageIO: JPEG2000 (OpenJPH) signed integer overflow in buffer allocation
CVSS 7.8
CVE-2026-6473 HIGH
PostgreSQL server undersizes allocations, via integer wraparound
CVSS 8.8
CVE-2026-8295 MEDIUM
Integer overflow in simdjson
CVE-2026-42580 MEDIUM
Netty: HTTP Request Smuggling due to incorrect chunk size parsing
CVSS 6.5
CVE-2026-34680 MEDIUM
CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)
CVSS 6.2
CVE-2026-34671 MEDIUM
CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)
CVSS 6.2
Details
Vulnerabilities 3,173
Exploit Likelihood Medium