The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
3,200 vulnerabilities with CWE-190
CVE-2021-27433
HIGH
ARM mbed-ualloc <1.3.0 - Memory Corruption
CVSS 7.3
CVE-2021-27431
HIGH
ARM CMSIS RTOS2 <2.1.3 - Memory Corruption
CVSS 7.3
CVE-2021-27427
HIGH
RIOT OS <2020.01.1 - Memory Corruption
CVSS 7.3
CVE-2021-27425
HIGH
Cesanta Software Mongoose-OS <2.17.0 - Memory Corruption
CVSS 7.3
CVE-2021-27421
HIGH
NXP MCUXpresso SDK <2.8.2 - Memory Corruption
CVSS 7.3
CVE-2021-27419
HIGH
uClibc-ng <1.0.37 - Memory Corruption
CVSS 7.3
CVE-2021-27417
MEDIUM
eCosCentric eCosPro RTOS <4.5.3 - Buffer Overflow
CVSS 4.6
CVE-2021-27411
MEDIUM
Micrium OS <5.10.1 - Memory Corruption
CVSS 6.5
CVE-2021-22680
HIGH
NXP MQX < 5.1 - Integer Overflow in Memory Allocation Functions
CVSS 7.3
CVE-2021-22556
MEDIUM
Fuchsia < 4.1 - Integer Overflow in Memory Cache Invalidation
CVSS 5.3
CVE-2021-4206
HIGH
QEMU < 7.0.0 - Heap-Based Buffer Overflow via QXL Cursor Allocation
CVSS 8.2
CVE-2021-3624
HIGH
dcraw - Integer Overflow via Malicious X3F Input Image
CVSS 7.8
CVE-2021-21948
HIGH
AnyCubic Chitubox AnyCubic Plugin 1.0.0 - Heap-Based Buffer Overflow via Crafted GF File
CVSS 7.8
CVE-2021-21914
HIGH
Accusoft ImageGear - Heap-Based Buffer Overflow via DecoderStream::Append
CVSS 8.8
CVE-2021-39762
HIGH
Android 12L - Remote Information Disclosure via Integer Overflow in tremolo
CVSS 7.5
CVE-2021-39759
HIGH
Android 12L - Local Privilege Escalation via Integer Overflow in libstagefright
CVSS 7.8
CVE-2021-3933
MEDIUM
OpenEXR - Integer Overflow via Crafted File Processing
CVSS 5.5
CVE-2021-39736
MEDIUM
Android - Integer Overflow to Out-of-Bounds Write in lwis_ioctl.c and lwis_periodic_io.c
CVSS 6.7
CVE-2021-39732
HIGH
Android - Integer Overflow to Out-of-Bounds Write in lwis_ioctl.c copy_io_entries
CVSS 7.8
CVE-2021-39719
MEDIUM
Android - Integer Overflow to Out-of-Bounds Write in lwis_top_register_io
CVSS 6.7
CVE-2021-39714
HIGH
Android - Use-After-Free via Integer Overflow in ion_buffer_kmap_get
CVSS 7.8
CVE-2021-42019
MEDIUM
Siemens RUGGEDCOM ROS - Integer Overflow in Partition Size Allocation
CVSS 5.9
CVE-2021-3428
MEDIUM
Linux Kernel < 5.9.0 - Denial of Service via Integer Overflow in ext4 Extent Cache
CVSS 5.5
CVE-2021-20303
MEDIUM
OpenEXR - Integer Overflow and Heap-Based Buffer Overflow in dataWindowForTile()
CVSS 6.1
CVE-2021-20300
MEDIUM
OpenEXR - Integer Overflow in hufUncompress
CVSS 5.5
Details
Vulnerabilities
3,200
Exploit Likelihood
Medium