The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
501 vulnerabilities with CWE-191
CVE-2015-9129
CRITICAL
Qualcomm Multiple Chipsets Firmware - Integer Underflow via TZ_PR_CMD_CONTENT_SET_PROP
CVSS 9.8
CVE-2015-1208
MEDIUM
FFmpeg < 2.4.6 - Integer Underflow in mov_read_default Function
CVSS 5.5
CVE-2015-2311
CRITICAL
capnproto < 0.4.1.1 and 0.5.x < 0.5.1.1 - Integer Underflow via Crafted Message
CVSS 9.8
CVE-2015-8370
HIGH
Grub2 1.98-2.02 - Integer Underflow via Backspace Characters in Authentication Functions
CVSS 7.4
CVE-2015-5212
LibreOffice <4.4.5 & Apache OpenOffice <4.1.2 - Memory Corruption
CVE-2015-0537
CRITICAL
Dell Bsafe < 4.0.8 - Integer Underflow
CVSS 9.8
CVE-2014-9626
HIGH
VLC media player < 2.1.6 - Integer Underflow in MP4_ReadBox_String
CVSS 7.8
CVE-2014-9883
HIGH
Android <2016-08-05 - Privilege Escalation
CVSS 7.8
CVE-2014-9087
Libksba <1.3.2 - DoS
CVE-2014-8768
tcpdump <4.7 - DoS
CVE-2014-0497
CRITICAL
KEV
Adobe Flash Player Integer Underflow Remote Code Execution
CVSS 9.8
CVE-2013-6425
pixman < 0.32.0 - Integer Underflow via Negative Bottom Value
CVE-2013-6424
pixman < 0.31.2 - Denial of Service via Negative Bottom Value in xTrapezoidValid Macro
CVE-2011-4031
FFmpeg < 0.8.3 - Remote Code Execution via ASF Packet Integer Underflow
CVE-2011-2497
Linux Kernel < 3.0 - Integer Underflow in L2CAP Configuration Request Handling
CVE-2011-1770
HIGH
Linux Kernel < 2.6.33.14 - Denial of Service via DCCP Feature Options Length Integer Underflow
CVSS 7.5
CVE-2010-4529
Linux Kernel < 2.6.37 - Integer Underflow in IRLMP_ENUMDEVICES getsockopt
CVE-2010-4164
Linux Kernel < 2.6.36.2 - Denial of Service via X.25 Facility Data Integer Underflow
CVE-2010-2497
FreeType < 2.4.0 - Integer Underflow in Glyph Handling
CVE-2009-3301
Apache OpenOffice < 3.2.0 - Integer Underflow via Crafted Word Document
CVE-2007-0063
VMware ESX - Remote Code Execution via DHCP Server Integer Underflow
CVE-2005-1891
HIGH
AOL AIM < 5.9.3797 - Denial of Service via Malformed GIF Buddy Icon
CVSS 7.5
CVE-2005-0199
CRITICAL
ngIRCd < 0.8.2 - Remote Denial of Service and Possible Code Execution via MODE Line Integer Underflow
CVSS 9.8
CVE-2004-1002
HIGH
ppp 2.4.1 - Denial of Service via CBCP Packet Integer Underflow
CVSS 7.5
CVE-2004-0816
HIGH
Linux Kernel < 2.6.8 - Denial of Service via Firewall Logging Integer Underflow
CVSS 7.5
Details
Vulnerabilities
501