CWE-190

Medium likelihood

Integer Overflow or Wraparound

Parent: CWE-682 - Incorrect Calculation

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

3,198 vulnerabilities with CWE-190
CVE-2022-20532 CRITICAL
Android 13 - Integer Overflow in MPEG4Extractor.cpp parseTrackFragmentRun
CVSS 9.8
CVE-2022-47454 MEDIUM
Android - Denial of Service in WLAN Driver
CVSS 5.5
CVE-2022-40530 HIGH
Qualcomm WLAN Firmware - Memory Corruption via Integer Overflow
CVSS 8.4
CVE-2022-25705 HIGH
Qualcomm APQ8009 Firmware - Memory Corruption via APDU Response Integer Overflow
CVSS 7.8
CVE-2022-34843 MEDIUM
Intel Trace Analyzer and Collector < 2021.5 - Authenticated Integer Overflow
CVSS 4.8
CVE-2022-47451 MEDIUM
Android - Denial of Service in WLAN Driver via Missing Parameter Check
CVSS 5.5
CVE-2022-47322 MEDIUM
Android - Denial of Service in WLAN Driver via Missing Parameter Check
CVSS 5.5
CVE-2022-38680 MEDIUM
Android - Denial of Service in WLAN Driver via Missing Parameter Check
CVSS 5.5
CVE-2022-38674 MEDIUM
Android - Denial of Service in WLAN Driver via Missing Parameter Check
CVSS 5.5
CVE-2022-33248 HIGH
User Identity Module - Buffer Overflow
CVSS 7.8
CVE-2022-2329 CRITICAL
IGSS Data Server <V15.0.0.22073 - Buffer Overflow
CVSS 9.8
CVE-2022-28331 CRITICAL
Apache Portable Runtime <1.7.0 - Buffer Overflow
CVSS 9.8
CVE-2022-25147 MEDIUM
Apache Portable Runtime Utility < 1.6.1 - Integer Overflow in apr_base64 Functions
CVSS 6.5
CVE-2022-24963 CRITICAL
Apache Portable Runtime 1.7.0 - Integer Overflow or Wraparound in apr_encode Functions
CVSS 9.8
CVE-2022-38725 HIGH
One Identity syslog-ng 3.0-3.37 and Premium Edition < 7.0.32 - Denial of Service via RFC3164 Parser Integer Overflow
CVSS 7.5
CVE-2022-35977 MEDIUM
Redis 6.0.0-6.0.16 - Authenticated Denial of Service via SETRANGE and SORT(_RO) Integer Overflow
CVSS 5.5
CVE-2022-41903 CRITICAL
Git < 2.30.6 - Integer Overflow via Commit Format Padding
CVSS 9.8
CVE-2022-23521 CRITICAL
Git < 2.30.6 - Integer Overflow via Gitattributes Parsing
CVSS 9.8
CVE-2022-1812 CRITICAL
Publify < 9.2.10 - Integer Overflow or Wraparound
CVSS 9.8
CVE-2022-40983 HIGH
Qt 6.3.2 - Code Execution via QML QtScript Reflect API Integer Overflow
CVSS 8.8
CVE-2022-3515 CRITICAL
Libksba < 1.6.3 - Remote Code Execution via CRL Parser Integer Overflow
CVSS 9.8
CVE-2022-43974 HIGH
MatrixSSL 4.0.4-4.5.1 - Remote Code Execution via Integer Overflow in TLS 1.3 Message Decoding
CVSS 8.1
CVE-2022-33266 MEDIUM
Qualcomm APQ8009 Firmware - Memory Corruption via Integer Overflow in Audio Playback
CVSS 5.9
CVE-2022-33219 CRITICAL
Qualcomm Automotive Firmware - Memory Corruption due to Integer Overflow
CVSS 9.3
CVE-2022-47660 HIGH
GPAC < 2.2.0 - Integer Overflow in isom_write.c
CVSS 7.8
Details
Vulnerabilities 3,198
Exploit Likelihood Medium