CWE-191

Integer Underflow (Wrap or Wraparound)

Parent: CWE-682 - Incorrect Calculation

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

501 vulnerabilities with CWE-191
CVE-2024-0565 MEDIUM
Linux Kernel 6.1.36-6.7 - Denial of Service via Integer Underflow in SMB Client
CVSS 6.8
CVE-2024-21309 HIGH
Windows 11/Server 2022 Elevation of Privilege via Integer Underflow
CVSS 7.8
CVE-2023-53679 MEDIUM
Linux Kernel 4.2-5.4.235 - Null Pointer Dereference via Integer Underflow in mt7601u WiFi Driver
CVSS 5.5
CVE-2023-53258 MEDIUM
Linux Kernel 6.0-6.1.43 6.4.8 - Integer Underflow in DRM AMD Display vblank Calculation
CVSS 5.5
CVE-2023-53226 MEDIUM
Linux Kernel 3.7-4.14.325 - Integer Underflow in WiFi Packet Processing
CVSS 5.5
CVE-2023-53189 MEDIUM
Linux Kernel 3.10.105-4.14.321 - Integer Underflow in IPv6 Address Configuration Timer Handling
CVSS 5.5
CVE-2023-28902 LOW
Volkswagen MIB3 < 0304 - DoS via Integer Underflow in Image Processing
CVSS 3.3
CVE-2023-52705 MEDIUM
Linux Kernel < 4.14.306 - Integer Underflow in NILFS2 Second Superblock Position Calculation
CVSS 5.5
CVE-2023-42118 HIGH
libspf2 - Remote Code Execution via SPF Macro Parsing Integer Underflow
CVSS 8.8
CVE-2023-39414 HIGH
GTKWave 3.3.115 - Integer Underflow in LXT2 Radix Shift Operation
CVSS 7.0
CVE-2023-39413 HIGH
GTKWave 3.3.115 - Integer Underflow in LXT2 Radix Shift Operation
CVSS 7.0
CVE-2023-48298 MEDIUM
ClickHouse 23.3-23.3.17.12 and 23.9-23.9.2.47474 - Unauthenticated Integer Underflow via FPC Codec Decompression
CVSS 5.9
CVE-2023-43628 MEDIUM
gpsd 3.25.1~dev - Integer Underflow via NTRIP Stream Parsing
CVSS 5.9
CVE-2023-47360 HIGH
VLC Media Player < 3.0.20 - Integer Underflow via Incorrect Packet Length
CVSS 7.5
CVE-2023-33059 HIGH
Qualcomm Modem Firmware - Memory Corruption via VOC Packet Processing
CVSS 7.8
CVE-2023-31102 HIGH
7-zip < 22.01 - Integer Underflow via Crafted 7Z Archive
CVSS 7.8
CVE-2023-5753 MEDIUM
Zephyr < 3.4.0 - Buffer Overflow in Bluetooth HCI Core
CVSS 6.3
CVE-2023-22308 HIGH
SoftEther VPN 5.01.9674 and 5.02 - Denial of Service via OvsProcessData Integer Underflow
CVSS 7.5
CVE-2023-36785 HIGH
Microsoft ODBC Driver for SQL Server - RCE
CVSS 7.8
CVE-2023-44378 HIGH
gnark < 0.9.0 - Incorrect Comparison via Field Overflow
CVSS 7.1
CVE-2023-32653 CRITICAL
Accusoft ImageGear 20.1 - Out-of-Bounds Write via DCM Pixel Data Decode
CVSS 9.8
CVE-2023-38162 HIGH
Windows Server 2012, 2016, 2019, 2022 - Denial of Service via DHCP Server Service Integer Underflow
CVSS 7.5
CVE-2023-36796 HIGH
Microsoft Visual Studio - Remote Code Execution
CVSS 7.8
CVE-2023-36794 HIGH
Microsoft Visual Studio - Remote Code Execution
CVSS 7.8
CVE-2023-40181 MEDIUM
FreeRDP < 2.11.0 - Integer Underflow in zgfx_decompress_segment
CVSS 5.3
Details
Vulnerabilities 501