CWE-190

Medium likelihood

Integer Overflow or Wraparound

Parent: CWE-682 - Incorrect Calculation

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

3,329 vulnerabilities with CWE-190
CVE-2026-10924 HIGH
Google Chrome - External Control of Assumed-Immutable Web Parameter
CVSS 8.3
CVE-2026-10921 HIGH
Google Chrome - External Control of Assumed-Immutable Web Parameter
CVSS 8.3
CVE-2026-49510 MEDIUM
Samsung Open Source Rlottie - Integer Overflow or Wraparound
CVSS 6.1
CVE-2026-37462 HIGH
gobgp v4.3.0 - Denial of Service via BGP UPDATE Message Integer Underflow
CVSS 7.5
CVE-2026-10722 LOW
cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow
CVSS 3.3
CVE-2026-45686 HIGH
OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI
CVSS 7.5
CVE-2026-0095 HIGH
Google Android - Integer Overflow or Wraparound
CVSS 8.0
CVE-2026-0080 MEDIUM
Google Android - Integer Overflow or Wraparound
CVSS 6.5
CVE-2026-0079 MEDIUM
Android 14-16 UBSan Runtime - Local Integer Overflow Denial of Service
CVSS 5.5
CVE-2026-0052 MEDIUM
Android 14-16 UBSan Runtime - Remote Integer Overflow Denial of Service
CVSS 6.5
CVE-2026-0044 MEDIUM
Android 14-16 UBSan Runtime - Remote System Crash via Integer Overflow
CVSS 6.5
CVE-2026-0043 MEDIUM
Android 14-16 UBSan Runtime - Local Integer Overflow Privilege Escalation
CVSS 5.5
CVE-2026-0041 MEDIUM
Android 14-16 UBSan Runtime - Remote UBSan Failure Denial of Service
CVSS 6.5
CVE-2026-0040 MEDIUM
Android 14-16 UBSan Runtime - Remote Crash via Integer Overflow
CVSS 6.5
CVE-2026-0039 MEDIUM
Android 14-16 UBSan Runtime - Remote Integer Overflow Denial of Service
CVSS 6.5
CVE-2026-10268 LOW
janet-lang janet marsh.c unmarshal_one_fiber integer overflow
CVSS 3.3
CVE-2026-10118 HIGH
Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication
CVSS 7.8
CVE-2026-46384 HIGH
iskorotkov/avro: Integer Overflow in Avro Decoder
CVSS 7.5
CVE-2026-9882 MEDIUM
Google Chrome - External Control of Assumed-Immutable Web Parameter
CVSS 6.5
CVE-2026-46198 HIGH
batman-adv: fix integer overflow on buff_pos
CVSS 8.8
CVE-2026-48065 MEDIUM
pam_usb: Unchecked integer multiplication before xmalloc() in conf.c allows heap-based buffer overflow on 32-bit targets
CVSS 6.7
CVE-2026-46062 HIGH
ntfs3: fix integer overflow in run_unpack() volume boundary check
CVSS 7.8
CVE-2026-46039 CRITICAL
rxgk: Fix potential integer overflow in length check
CVSS 9.8
CVE-2026-46023 MEDIUM
dm mirror: fix integer overflow in create_dirty_log()
CVSS 5.5
CVE-2026-45990 MEDIUM
slub: fix data loss and overflow in krealloc()
CVSS 5.5
Details
Vulnerabilities 3,329
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits