The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
502 vulnerabilities with CWE-191
CVE-2026-50593
HIGH
Graphite < 1.3.15 - Integer Underflow (Wrap or Wraparound)
CVSS 7.3
CVE-2026-35049
MEDIUM
wire-ios has Persistent Remote DoS via Integer Underflow
CVSS 6.5
CVE-2026-37231
HIGH
FlexRIC 2.0.0 - Denial of Service via xApp ID Counter Wrap-Around
CVSS 7.5
CVE-2026-46107
HIGH
dm-thin: fix metadata refcount underflow
CVSS 7.8
CVE-2026-45999
HIGH
erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()
CVSS 7.1
CVE-2026-45884
MEDIUM
apparmor: avoid per-cpu hold underflow in aa_get_buffer
CVSS 5.5
CVE-2026-25104
HIGH
Mediaarea MediaInfoLib - Integer Underflow (Wrap or Wraparound)
CVSS 7.8
CVE-2026-44069
LOW
Netatalk 3.0.0-4.4.2 and >=4.5.0 - Integer Underflow in Volume Translation
CVSS 3.9
CVE-2026-44060
HIGH
Integer underflow in dsi_writeinit() leads to denial of service
CVSS 7.5
CVE-2026-8463
MEDIUM
Crypt::Argon2 versions from 0.017 before 0.031 for Perl perform a heap out-of-bounds read in argon2_verify on empty encoded input
CVSS 5.3
CVE-2026-42268
HIGH
ModSecurity: Unsigned integer underflow in @verifySSN / @verifyCPF / @verifySVNR operators
CVSS 7.5
CVE-2026-34672
MEDIUM
CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)
CVSS 6.2
CVE-2026-34667
MEDIUM
CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)
CVSS 6.2
CVE-2026-40397
HIGH
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-43916
HIGH
pam_authnft: Heap buffer overflow in NETLINK_SOCK_DIAG reply walker
CVE-2026-43359
MEDIUM
btrfs: fix transaction abort on set received ioctl due to item overflow
CVSS 5.5
CVE-2026-43301
MEDIUM
media: chips-media: wave5: Fix PM runtime usage count underflow
CVSS 5.5
CVE-2026-43187
HIGH
xfs: delete attr leaf freemap entries when empty
CVSS 8.8
CVE-2026-43171
MEDIUM
EFI/CPER: don't dump the entire memory region
CVSS 5.5
CVE-2026-37459
HIGH
FRRouting stable/10.0-stable/10.6 - Denial of Service via Crafted BGP UPDATE Message
CVSS 7.5
CVE-2026-7736
HIGH
osrg GoBGP mrt.go parseRibEntry integer underflow
CVSS 7.3
CVE-2026-37534
CRITICAL
Open-SAE-J1939 Integer Underflow in SAE_J1939_Read_Transport_Protocol_Data_Transfer
CVSS 9.8
CVE-2026-33845
HIGH
Gnutls: gnutls: denial of service via dtls zero-length fragment
CVSS 7.5
CVE-2026-7424
HIGH
Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP
CVSS 8.1
CVE-2026-7423
MEDIUM
Integer Underflow in ICMP Echo Reply Processing in FreeRTOS-Plus-TCP
CVSS 5.3
Details
Vulnerabilities
502