CWE-681

High likelihood

Incorrect Conversion between Numeric Types

Parent: CWE-704 - Incorrect Type Conversion or Cast

When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.

124 vulnerabilities with CWE-681
CVE-2021-29539 LOW
TensorFlow < 2.1.4 - Denial of Service via ImmutableConst dtype Handling
CVSS 2.5
CVE-2021-3444 HIGH
Linux Kernel < 5.4.101 - Information Disclosure and Potential Code Execution via BPF Verifier Truncation
CVSS 7.8
CVE-2021-27219 HIGH
GNOME GLib <2.66.6, <2.67.3 - Memory Corruption
CVSS 7.5
CVE-2021-27218 HIGH
GNOME GLib <2.66.7 & <2.67.4 - Info Disclosure
CVSS 7.5
CVE-2020-28588 MEDIUM
Linux Kernel 5.1-5.10 - Information Disclosure via /proc/pid/syscall
CVSS 5.5
CVE-2020-15225 HIGH
django-filter < 2.4.0 - Denial of Service via NumberFilter Exponential Input
CVSS 7.5
CVE-2020-13545 HIGH
SoftMaker Office 2021 - Memory Corruption
CVSS 7.8
CVE-2020-13544 HIGH
SoftMaker Office 2021 - Buffer Overflow
CVSS 7.8
CVE-2020-35926 CRITICAL
nanorand < 0.5.1 - Incorrect Conversion between Numeric Types
CVSS 9.8
CVE-2020-13985 HIGH
Contiki < 3.0 - Memory Corruption via RPL Extension Header Handling
CVSS 7.5
CVE-2020-27194 MEDIUM
Linux kernel <5.8.15 - Memory Corruption
CVSS 5.5
CVE-2020-1913 HIGH
Facebook Hermes < 0.4.3 / hermes-engine < 0.5.2 - DoS or RCE via Integer Signedness Error
CVSS 8.1
CVE-2020-12417 HIGH
Firefox < 78.0 - Memory Corruption via JavaScript ValueTag Confusion
CVSS 8.8
CVE-2020-4032 LOW
FreeRDP < 2.1.2 - Integer Casting Vulnerability in update_recv_secondary_order
CVSS 3.1
CVE-2020-2908 HIGH
Oracle VM VirtualBox <5.2.40-6.1.6 - Privilege Escalation
CVSS 8.2
CVE-2020-6096 HIGH
GNU glibc 2.30.9000 - Memory Corruption
CVSS 8.1
CVE-2020-6582 HIGH
Nagios NRPE 3.2.1 - Heap-Based Buffer Overflow via Incorrect Numeric Conversion
CVSS 7.5
CVE-2019-14563 HIGH
EDK II - Integer Truncation via Local Access
CVSS 7.8
CVE-2019-10624 HIGH
Qualcomm APQ8096AU Firmware - Buffer Overflow via Integer Truncation in Vendor Command Handling
CVSS 7.8
CVE-2019-19945 HIGH
OpenWrt 18.06.0-18.06.5 and 19.x through 19.07.0-rc2 - Denial of Service via uhttpd Integer Signedness Error
CVSS 7.5
CVE-2019-19958 MEDIUM
libiec61850 1.4.0 - Denial of Service via Integer Signedness Issue in StringUtils_createStringFromBuffer
CVSS 6.5
CVE-2019-16778 LOW
TensorFlow < 1.15.0 - Heap Buffer Overflow in UnsortedSegmentSum
CVSS 2.6
CVE-2019-19317 CRITICAL
SQLite 3.30.1 - Denial of Service via Generated Column Bitmask Handling
CVSS 9.8
CVE-2019-14842 CRITICAL
libnbd < 1.0.3 - Remote Code Execution via Negative Chunk Offset in Structured Reply
CVSS 9.8
CVE-2019-10203 MEDIUM
PowerDNS pdns <4.0.9, <4.1.11 - DoS
CVSS 4.3
Details
Vulnerabilities 124
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits