CWE-190

Medium likelihood

Integer Overflow or Wraparound

Parent: CWE-682 - Incorrect Calculation

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

3,206 vulnerabilities with CWE-190
CVE-2018-6174 HIGH
Chrome < 68.0.3440.75 - Remote Code Execution via Integer Overflow in Swiftshader
CVSS 8.8
CVE-2018-6120 HIGH
Google Chrome <66.0.3359.170 - Memory Corruption
CVSS 8.8
CVE-2018-20673 MEDIUM
GNU Binutils - Integer Overflow to Heap-Based Buffer Overflow in demangle_template
CVSS 5.5
CVE-2018-20671 MEDIUM
GNU Binutils < 2.31.1 - Heap-Based Buffer Overflow via Crafted Section Size
CVSS 5.5
CVE-2018-18667 HIGH
pylontoken - Integer Overflow in mintToken Function
CVSS 7.5
CVE-2018-18666 HIGH
SwftCoin - Integer Overflow in mintToken Function
CVSS 7.5
CVE-2018-18665 HIGH
NexxusToken - Integer Overflow in mintToken Function
CVSS 7.5
CVE-2018-20546 HIGH
libcaca - Integer Overflow or Wraparound in get_rgba_default Function
CVSS 8.1
CVE-2018-20545 HIGH
libcaca 0.99.beta19 - Integer Overflow or Wraparound in load_image Function
CVSS 8.8
CVE-2018-20406 HIGH
Python < 3.7.1 - Integer Overflow via Large LONG_BINPUT in _pickle Module
CVSS 7.5
CVE-2018-20346 HIGH
SQLite < 3.25.3 - Remote Code Execution via FTS3 Shadow Table Integer Overflow
CVSS 8.1
CVE-2018-20330 HIGH
libjpeg-turbo 2.0.1 - Buffer Overflow
CVSS 8.8
CVE-2018-1000876 HIGH
binutils < 2.32 - Integer Overflow in objdump
CVSS 7.8
CVE-2018-11985 HIGH
Android - Integer Overflow to Heap Buffer Overflow in Memory Allocation
CVSS 7.8
CVE-2018-11458 HIGH
SINUMERIK 828D/840D sl V4.7/V4.8 < SP6 HF1/SP6 HF5/SP3 - Unauthenticated RCE via VNC
CVSS 8.1
CVE-2018-18356 HIGH
Google Chrome < 71.0.3578.80 - Use-After-Free via Skia Path Handling
CVSS 8.8
CVE-2018-18341 HIGH
Google Chrome < 71.0.3578.80 - Heap Buffer Overflow via Integer Overflow in Blink
CVSS 8.8
CVE-2018-5816 MEDIUM
LibRaw < 0.18.12 - Integer Overflow via NOKIARAW File in identify() Function
CVSS 6.5
CVE-2018-5815 MEDIUM
LibRaw < 0.18.12 - Integer Overflow in parse_qt() Function
CVSS 6.5
CVE-2018-18311 CRITICAL
Perl < 5.26.3 and 5.28.x < 5.28.1 - Buffer Overflow via Crafted Regular Expression
CVSS 9.8
CVE-2018-19932 MEDIUM
GNU Binutils < 2.31 - Integer Overflow and Infinite Loop in BFD Library
CVSS 5.5
CVE-2018-19665 MEDIUM
QEMU < 3.0.1 - Memory Corruption via Bluetooth Length Handling
CVSS 5.7
CVE-2018-9565 HIGH
Android - Integer Overflow to Out-of-Bounds Read in readBytes
CVSS 7.5
CVE-2018-9556 CRITICAL
Android 9 - Integer Overflow to Out-of-Bounds Write in ParsePayloadHeader
CVSS 9.8
CVE-2018-6092 HIGH
Google Chrome < 66.0.3359.117 - Remote Code Execution via WebAssembly Integer Overflow
CVSS 8.8
Details
Vulnerabilities 3,206
Exploit Likelihood Medium