CWE-190

Medium likelihood

Integer Overflow or Wraparound

Parent: CWE-682 - Incorrect Calculation

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

3,329 vulnerabilities with CWE-190
CVE-2026-53466 MEDIUM
ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow
CVSS 6.5
CVE-2026-6682 HIGH
FatFs Integer Overflow in FAT32 Volume Mount
CVSS 7.6
CVE-2026-7838 HIGH
UltraVNC viewer heap buffer overflow via integer overflow in RFB connection-failure reason length
CVSS 8.8
CVE-2026-7828 MEDIUM
UltraVNC repeater integer overflow in win_log malloc leading to heap overflow
CVSS 5.3
CVE-2026-54903 MEDIUM
Oj: Integer Overflow in Oj.load 2GB String Handling
CVE-2026-54900 MEDIUM
Oj: Negative-Size memcpy in Oj::Parser create_id Attribute Handling
CVE-2026-56363 LOW
ImageMagick - Division by Zero in Binomial Kernel Processing
CVSS 3.3
CVE-2026-53432 HIGH
Integer Overflow in fzf
CVSS 7.5
CVE-2026-57965 MEDIUM
Spice-vdagent: integer overflow in udscs_write() leading to heap buffer overflow
CVSS 5.1
CVE-2026-58050 HIGH
libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation
CVSS 7.0
CVE-2026-49416 HIGH
FreeBSD - Integer Overflow in Vt(4) CONS_HISTORY Ioctl
CVSS 7.8
CVE-2026-45258 HIGH
FreeBSD sound(4) mmap - Integer Overflow Privilege Escalation
CVSS 7.8
CVE-2026-48933 HIGH
Node - Integer Overflow or Wraparound
CVSS 7.5
CVE-2026-6679 HIGH
DTLS 1.3 ACK serialization heap buffer overflow via integer truncation
CVSS 7.5
CVE-2026-54679 MEDIUM
jq: potential integer overflow in jvp_string_append
CVSS 5.5
CVE-2026-57235 HIGH
Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`
CVSS 8.2
CVE-2026-54226 MEDIUM
Apache Kvrocks: RESTORE IntSet Integer Overflow Leads to Remote DoS
CVE-2026-12244 HIGH
NLnet Labs - Heap Overflow and Crash with Crafted SVCB RR
CVSS 8.8
CVE-2026-53068 HIGH
drm/komeda: fix integer overflow in AFBC framebuffer size check
CVSS 7.1
CVE-2026-53059 HIGH
Linux - Out-of-Bounds Access
CVSS 7.8
CVE-2026-53021 MEDIUM
scsi: target: core: Fix integer overflow in UNMAP bounds check
CVSS 5.5
CVE-2026-52972 MEDIUM
crypto: af_alg - Cap AEAD AD length to 0x80000000
CVSS 5.5
CVE-2026-52969 HIGH
KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
CVSS 7.8
CVE-2026-52948 MEDIUM
i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl
CVSS 5.5
CVE-2026-48502 HIGH
MessagePack-CSharp ReadDateTime - Stack Overflow Denial of Service
CVSS 7.5
Details
Vulnerabilities 3,329
Exploit Likelihood Medium