CWE-191

Integer Underflow (Wrap or Wraparound)

Parent: CWE-682 - Incorrect Calculation

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

501 vulnerabilities with CWE-191
CVE-2023-21684 HIGH
Microsoft PostScript and PCL6 Class Printer Driver - RCE
CVSS 8.8
CVE-2023-0469 MEDIUM
Linux Kernel - Use-After-Free in io_uring Fixed File Installation
CVSS 5.5
CVE-2023-21681 HIGH
Microsoft WDAC OLE DB provider for SQL Server - RCE
CVSS 8.8
CVE-2023-21556 HIGH
Windows L2TP - Remote Code Execution via Integer Underflow
CVSS 8.1
CVE-2023-21527 HIGH
Windows iSCSI Service - Denial of Service via Integer Underflow
CVSS 7.5
CVE-2022-50036 MEDIUM
Linux Kernel 4.18-5.19.4 - Integer Underflow in DRM Sun4i DSI Packet Size Calculation
CVSS 5.5
CVE-2022-49650 MEDIUM
Linux Kernel 4.17-5.15.54 5.16-5.18.11 - Integer Underflow in DMA Engine Runtime PM
CVSS 5.5
CVE-2022-49564 MEDIUM
Linux Kernel < 5.15.58, 5.16.0-5.18.15 - Integer Underflow in DH Key Parameter Handling
CVSS 5.5
CVE-2022-49563 MEDIUM
Linux Kernel - Integer Underflow in RSA Parameter Handling
CVSS 5.5
CVE-2022-49280 MEDIUM
Linux Kernel Integer Underflow in NFSD Write Arguments Decoding
CVSS 5.5
CVE-2022-49278 HIGH
Linux Kernel 5.9-5.10.110, 5.11-5.15.33, 5.16-5.16.19, 5.17-5.17.2 - Integer Underflow in rproc_coredump_write()
CVSS 7.1
CVE-2022-49208 MEDIUM
Linux Kernel 5.14-5.14, 5.15-5.15.33, 5.16-5.16.19, 5.17-5.17.2 - Integer Underflow in RDMA/irdma CEQ Initialization
CVSS 5.5
CVE-2022-49199 MEDIUM
Linux Kernel 5.16-5.16.18, 5.17-5.17.1 - Integer Underflow in nldev_stat_set_counter_dynamic_doit()
CVSS 5.5
CVE-2022-48828 MEDIUM
Linux Kernel < 5.4.295 - Integer Underflow in NFSv4 File Size Handling
CVSS 5.5
CVE-2022-48804 MEDIUM
Linux Kernel Integer Underflow in vt_ioctl via array_index_nospec
CVSS 5.5
CVE-2022-48665 MEDIUM
Linux Kernel 5.19-5.19.11 - Integer Underflow in exFAT Large Capacity Partition Handling
CVSS 5.5
CVE-2022-48643 MEDIUM
Linux Kernel 5.10.140-5.10.145, 5.15.64-5.15.70, 5.19.6-5.19.11 - Integer Underflow in nf_tables_addchain
CVSS 5.5
CVE-2022-28733 HIGH
GRUB2 2.00-2.06-2 - Integer Underflow in grub_net_recv_ip4_packets
CVSS 8.1
CVE-2022-38681 MEDIUM
Android - Denial of Service via Missing Parameter Check in WLAN Driver
CVSS 5.5
CVE-2022-4338 CRITICAL
OpenvSwitch <version> - Integer Underflow
CVSS 9.8
CVE-2022-44444 MEDIUM
Android - Denial of Service via Missing Bounds Check in WLAN Driver
CVSS 5.5
CVE-2022-20516 HIGH
Android - Remote Information Disclosure via Integer Overflow in rw_t3t_act_handle_check_ndef_rsp
CVSS 7.5
CVE-2022-20483 HIGH
Android - Remote Information Disclosure via Integer Overflow in AVRC Response Parsing
CVSS 7.5
CVE-2022-37301 HIGH
Modicon M340 and M580 Firmware < 3.50/4.01 - Denial of Service via Modbus TCP Memory Access Violation
CVSS 7.5
CVE-2022-39343 MEDIUM
Azure RTOS FileX < 6.2.0 - Integer Overflow in Fault Tolerant Log Recovery
CVSS 5.6
Details
Vulnerabilities 501