CWE-190

Medium likelihood

Integer Overflow or Wraparound

Parent: CWE-682 - Incorrect Calculation

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

3,200 vulnerabilities with CWE-190
CVE-2020-4030 LOW
FreeRDP < 2.1.2 - Integer Overflow in TrioParse
CVSS 3.5
CVE-2020-12887 HIGH
Arm Mbed OS 5.15.3 - Memory Corruption
CVSS 7.5
CVE-2020-14401 MEDIUM
libvncserver < 0.9.13 - Integer Overflow in Pixel Value Calculation
CVSS 6.5
CVE-2020-11904 HIGH
Treck TCP/IP < 6.0.1.66 - Integer Overflow to Out-of-Bounds Write
CVSS 7.3
CVE-2020-14147 HIGH
Redis < 6.0.3 - Denial of Service via Integer Overflow in getnum Function
CVSS 7.7
CVE-2020-14155 MEDIUM
PCRE < 8.44 - Integer Overflow via Large Number After (?C Substring
CVSS 5.3
CVE-2020-13999 MEDIUM
libemf < 1.0.12 - Integer Overflow and Denial of Service via ScaleViewPortExtEx
CVSS 5.5
CVE-2020-0545 MEDIUM
Intel Converged Security Management Engine Firmware < 11.8.77 - Denial of Service via Integer Overflow
CVSS 4.4
CVE-2020-0216 HIGH
Android - Local Privilege Escalation via Integer Overflow in phNxpExtns_MifareStd.cpp
CVSS 7.8
CVE-2020-0198 HIGH
Android - Integer Overflow in exif_data_load_data_content
CVSS 7.5
CVE-2020-0194 HIGH
Android 10 - Remote Code Execution via Integer Overflow in ihevcd_parse_slice_header
CVSS 8.8
CVE-2020-0181 HIGH
Android - Denial of Service via Integer Overflow in exif_data_load_data_thumbnail
CVSS 7.5
CVE-2020-0167 MEDIUM
Android 10 - Local Information Disclosure via Integer Overflow in ResourceTypes.cpp
CVSS 5.5
CVE-2020-0139 MEDIUM
Android 10 - Local Information Disclosure via NDEF_MsgValidate Integer Overflow
CVSS 4.4
CVE-2020-0136 HIGH
Android 10 - Integer Overflow to Out-of-Bounds Write in Parcel.cpp
CVSS 7.8
CVE-2020-0128 HIGH
Android - Remote Information Disclosure via Integer Overflow in AMPEG4ElementaryAssembler
CVSS 7.5
CVE-2020-0117 CRITICAL
Android 8.0-10 - Remote Code Execution via Integer Overflow in aes_cmac
CVSS 9.8
CVE-2020-1281 HIGH
Microsoft Windows - Remote Code Execution via OLE Input Validation Failure
CVSS 8.8
CVE-2020-9852 HIGH
iPadOS < 13.5 - Integer Overflow to Kernel Code Execution
CVSS 7.8
CVE-2020-9841 HIGH
macOS < 10.15.5 - Integer Overflow to Kernel Arbitrary Code Execution
CVSS 7.8
CVE-2020-13974 HIGH
Linux Kernel 4.4-5.7.1 - Integer Overflow in VT Keyboard Driver
CVSS 7.8
CVE-2020-10070 CRITICAL
Zephyr < 2.2.0 - Memory Corruption via MQTT Bounds Checking Issue
CVSS 9.0
CVE-2020-10063 MEDIUM
Zephyr < 2.2.0 - Denial of Service via CoAP Packet Parsing
CVSS 6.8
CVE-2020-10878 HIGH
Perl < 5.30.3 - Integer Overflow via Regular Expression Compilation
CVSS 8.6
CVE-2020-10543 HIGH
Perl < 5.30.3 - Heap-Based Buffer Overflow via Nested Regular Expression Quantifiers
CVSS 8.2
Details
Vulnerabilities 3,200
Exploit Likelihood Medium