CWE-191

Integer Underflow (Wrap or Wraparound)

Parent: CWE-682 - Incorrect Calculation

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

459 vulnerabilities with CWE-191
CVE-2024-55627 MEDIUM
Suricata < 7.0.8 - Integer Underflow in TCP Stream Handling
CVSS 5.9
CVE-2024-56375 HIGH
nicmx fort_validator 1.6.3-1.6.4 - Integer Underflow via Empty Manifest FileList
CVSS 7.5
CVE-2024-49103 MEDIUM
Windows WwanSvc - Out-of-bounds Read
CVSS 4.3
CVE-2024-49077 MEDIUM
Windows Mobile Broadband Driver - Elevation of Privilege via Out-of-bounds Read
CVSS 6.8
CVE-2024-47606 CRITICAL
GStreamer < 1.24.10 - Integer Underflow via qtdemux_parse_theora_extension
CVSS 9.8
CVE-2024-47546 HIGH
GStreamer <1.24.10 - Memory Corruption
CVSS 7.5
CVE-2024-47545 HIGH
GStreamer <1.24.10 - Buffer Overflow
CVSS 7.5
CVE-2024-11950 HIGH
XnView Classic - Remote Code Execution via RWZ File Parsing Integer Underflow
CVSS 8.8
CVE-2024-53955 HIGH
Adobe Bridge 14.1.3 and <=15.0 - Integer Underflow leading to Arbitrary Code Execution
CVSS 7.8
CVE-2024-53954 HIGH
Adobe Animate < 23.0.9 - Integer Underflow leading to Arbitrary Code Execution
CVSS 7.8
CVE-2024-52989 HIGH
Adobe Animate < 23.0.9 - Integer Underflow to Arbitrary Code Execution
CVSS 7.8
CVE-2024-52987 HIGH
Adobe Animate < 23.0.9 - Integer Underflow leading to Arbitrary Code Execution
CVSS 7.8
CVE-2024-52986 HIGH
Adobe Animate < 23.0.9 - Integer Underflow to Arbitrary Code Execution
CVSS 7.8
CVE-2024-52985 HIGH
Adobe Animate < 23.0.9 - Integer Underflow leading to Arbitrary Code Execution
CVSS 7.8
CVE-2024-52984 HIGH
Adobe Animate < 23.0.9 - Integer Underflow leading to Arbitrary Code Execution
CVSS 7.8
CVE-2024-54095 HIGH
Solid Edge SE2024 <V224.0 Update 10 - Code Injection
CVSS 7.8
CVE-2024-52558 MEDIUM
Planet WGS-804HPT >=v1.305b210531 <v1.305b241111 - Unauthenticated Denial of Service via Integer Underflow
CVSS 5.3
CVE-2024-11477 HIGH
7-Zip 24.07 - Zstandard Decompression Code Execution
CVSS 7.8
CVE-2024-53081 MEDIUM
Linux Kernel 6.0-6.1.116, 6.2-6.6.60, 6.7-6.11.7 - Integer Underflow in AR0521 PLL Value Check
CVSS 5.5
CVE-2024-53061 HIGH
Linux Kernel Integer Underflow in s5p-jpeg Buffer Handling
CVSS 7.8
CVE-2024-50290 MEDIUM
Linux Kernel Integer Underflow in SNR Register Read
CVSS 5.5
CVE-2024-49514 HIGH
Photoshop Desktop <24.7.3, 25.11 - Code Injection
CVSS 7.8
CVE-2024-50258 MEDIUM
Linux Kernel 4.16-6.6.60, 5.16-6.1.120, 6.2-6.6.60, 6.7-6.11.7 - Integer Underflow in GSO Segment Calculation
CVSS 5.5
CVE-2024-20474 MEDIUM
Cisco Secure Client - Unauthenticated Denial of Service via IKEv2 Integer Underflow
CVSS 4.3
CVE-2024-47425 HIGH
Adobe Framemaker <2020.6, 2022.4 - RCE
CVSS 7.8
Details
Vulnerabilities 459