CWE-191

Integer Underflow (Wrap or Wraparound)

Parent: CWE-682 - Incorrect Calculation

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

459 vulnerabilities with CWE-191
CVE-2026-43301 MEDIUM
media: chips-media: wave5: Fix PM runtime usage count underflow
CVSS 5.5
CVE-2026-43187 HIGH
xfs: delete attr leaf freemap entries when empty
CVSS 8.8
CVE-2026-43171 MEDIUM
EFI/CPER: don't dump the entire memory region
CVSS 5.5
CVE-2026-7736 HIGH
osrg GoBGP mrt.go parseRibEntry integer underflow
CVSS 7.3
CVE-2026-37534 CRITICAL
Open-SAE-J1939 Integer Underflow in SAE_J1939_Read_Transport_Protocol_Data_Transfer
CVSS 9.8
CVE-2026-33845 HIGH
Gnutls: gnutls: denial of service via dtls zero-length fragment
CVSS 7.5
CVE-2026-7424 HIGH
Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP
CVSS 8.1
CVE-2026-7423 MEDIUM
Integer Underflow in ICMP Echo Reply Processing in FreeRTOS-Plus-TCP
CVSS 5.3
CVE-2026-41499 MEDIUM
Wazuh: Multiple Heap-based NULL WRITE Buffer Underflows in parse_uname_string()
CVSS 6.5
CVE-2026-26204 MEDIUM
Wazuh: Heap-based NULL WRITE Buffer Underflow in GetAlertData
CVSS 4.4
CVE-2026-6914 MEDIUM
MD5 checksum creation may cause availability loss
CVSS 6.5
CVE-2026-40356 MEDIUM
MIT Kerberos 5 1.18-<1.22.3 - Unauthenticated Integer Underflow via NegoEx Mechanism
CVSS 5.9
CVE-2026-31662 HIGH
tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG
CVSS 7.5
CVE-2026-31656 HIGH
drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat
CVSS 7.8
CVE-2026-31551 MEDIUM
wifi: mac80211: Fix static_branch_dec() underflow for aql_disable.
CVSS 5.5
CVE-2026-28525 MEDIUM
SWUpdate Integer Underflow in Multipart Upload Parser
CVSS 6.8
CVE-2026-33999 HIGH
Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling
CVSS 7.8
CVE-2026-34064 MEDIUM
nimiq-account: Vesting insufficient funds error can panic
CVSS 5.3
CVE-2026-5720 CRITICAL
miniupnpd Integer Underflow SOAPAction Header Parsing
CVSS 9.1
CVE-2026-27297 HIGH
Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (CWE-191)
CVSS 7.8
CVE-2026-27296 HIGH
Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (CWE-191)
CVSS 7.8
CVE-2026-32149 HIGH
Windows Hyper-V Remote Code Execution Vulnerability
CVSS 7.3
CVE-2026-27907 HIGH
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-33899 MEDIUM
ImageMagick: Heap BufferOverflow write of single zero byte when parsing XML
CVSS 5.3
CVE-2026-31417 HIGH
net/x25: Fix overflow when accumulating packets
CVSS 7.5
Details
Vulnerabilities 459