CWE-191

Integer Underflow (Wrap or Wraparound)

Parent: CWE-682 - Incorrect Calculation

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

501 vulnerabilities with CWE-191
CVE-2019-9755 HIGH
ntfs-3g 2017.3.23 - Buffer Overflow
CVSS 7.0
CVE-2019-2245 CRITICAL
Qualcomm Snapdragon - Buffer Overflow
CVSS 9.8
CVE-2019-2244 CRITICAL
Qualcomm Snapdragon - Buffer Overflow
CVSS 9.8
CVE-2019-10053 CRITICAL
Suricata 4.1.x <4.1.4 - Buffer Overflow
CVSS 9.8
CVE-2019-9133 MEDIUM
KMPlayer < 2018.12.24.14 - Integer Underflow via Subtitle Processing
CVSS 5.5
CVE-2018-9388 CRITICAL
Android - Integer Underflow and Out-of-Bounds Write in FTM4 PDC Driver
CVSS 9.8
CVE-2018-5852 HIGH
Qualcomm MDM9206-MDM9650, MSM8909W, SD 210-845 Firmware - Buffer Over-read via IPA Driver NAT Entry Debugfs Command
CVSS 8.4
CVE-2018-21065 CRITICAL
Android M(6.0) N(7.x) O(8.x) - Integer Underflow in eCryptFS
CVSS 9.8
CVE-2018-20989 HIGH
untrusted < 0.6.2 - Integer Underflow
CVSS 7.5
CVE-2018-11930 CRITICAL
Snapdragon Auto - Integer Truncation
CVSS 9.8
CVE-2018-4011 HIGH
CUJO Smart Firewall 7003 - Unauthenticated Integer Underflow via mDNS SRV Record Parsing
CVSS 7.5
CVE-2018-20181 CRITICAL
rdesktop <= 1.8.3 - Integer Underflow and Heap-Based Buffer Overflow in seamless_process()
CVSS 9.8
CVE-2018-20180 CRITICAL
rdesktop <= 1.8.3 - Integer Underflow and Heap-Based Buffer Overflow in rdpsnddbg_process()
CVSS 9.8
CVE-2018-20179 CRITICAL
rdesktop <= 1.8.3 - Integer Underflow and Heap-Based Buffer Overflow in lspci_process()
CVSS 9.8
CVE-2018-16601 HIGH
Amazon Web Services FreeRTOS < 1.3.1 and FreeRTOS < 10.0.1 - Integer Underflow in TCP/IP Stack
CVSS 8.1
CVE-2018-15418 HIGH
Cisco Webex Meetings Online < 1.3.37 - Remote Code Execution via Malicious ARF/WRF File
CVSS 7.8
CVE-2018-3999 HIGH
Atlantis Word Processor 3.2.5.0 - Stack-Based Buffer Overflow in JPEG Parser
CVSS 7.8
CVE-2018-14817 CRITICAL
Fuji Electric V-Server <4.0.3.0 - RCE
CVSS 9.8
CVE-2018-11301 HIGH
Android - Integer Underflow in Debug Log Event Processing
CVSS 7.8
CVE-2018-3926 MEDIUM
Samsung SmartThings Hub STH-ETH-250 Firmware 0.20.17 - Integer Underflow via Malformed Firmware Update File
CVSS 5.5
CVE-2018-14353 CRITICAL
Mutt < 1.10.1 and NeoMutt < 20180716 - Integer Underflow in imap_quote_string
CVSS 9.8
CVE-2018-14325 HIGH
MP4v2 2.0.0 - Memory Corruption
CVSS 8.8
CVE-2018-12230 HIGH
RemiCoin - Integer Underflow in transferFrom Function
CVSS 7.5
CVE-2018-5865 MEDIUM
Android <2018-07-05 - Memory Corruption
CVSS 5.5
CVE-2018-12025 HIGH
FuturXE - Unauthorized Token Transfer via Integer Underflow in transferFrom Function
CVSS 7.5
Details
Vulnerabilities 501