CWE-681

High likelihood

Incorrect Conversion between Numeric Types

Parent: CWE-704 - Incorrect Type Conversion or Cast

When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.

116 vulnerabilities with CWE-681
CVE-2020-35926 CRITICAL
nanorand < 0.5.1 - Incorrect Conversion between Numeric Types
CVSS 9.8
CVE-2020-13985 HIGH
Contiki < 3.0 - Memory Corruption via RPL Extension Header Handling
CVSS 7.5
CVE-2020-27194 MEDIUM
Linux kernel <5.8.15 - Memory Corruption
CVSS 5.5
CVE-2020-1913 HIGH
Facebook Hermes < 0.4.3 / hermes-engine < 0.5.2 - DoS or RCE via Integer Signedness Error
CVSS 8.1
CVE-2020-12417 HIGH
Firefox < 78.0 - Memory Corruption via JavaScript ValueTag Confusion
CVSS 8.8
CVE-2020-4032 LOW
FreeRDP < 2.1.2 - Integer Casting Vulnerability in update_recv_secondary_order
CVSS 3.1
CVE-2020-2908 HIGH
Oracle VM VirtualBox <5.2.40-6.1.6 - Privilege Escalation
CVSS 8.2
CVE-2020-6096 HIGH
GNU glibc 2.30.9000 - Memory Corruption
CVSS 8.1
CVE-2020-6582 HIGH
Nagios NRPE 3.2.1 - Heap-Based Buffer Overflow via Incorrect Numeric Conversion
CVSS 7.5
CVE-2019-14563 HIGH
EDK II - Integer Truncation via Local Access
CVSS 7.8
CVE-2019-10624 HIGH
Qualcomm APQ8096AU Firmware - Buffer Overflow via Integer Truncation in Vendor Command Handling
CVSS 7.8
CVE-2019-19945 HIGH
OpenWrt 18.06.0-18.06.5 and 19.x through 19.07.0-rc2 - Denial of Service via uhttpd Integer Signedness Error
CVSS 7.5
CVE-2019-19958 MEDIUM
libiec61850 1.4.0 - Denial of Service via Integer Signedness Issue in StringUtils_createStringFromBuffer
CVSS 6.5
CVE-2019-16778 LOW
TensorFlow < 1.15.0 - Heap Buffer Overflow in UnsortedSegmentSum
CVSS 2.6
CVE-2019-19317 CRITICAL
SQLite 3.30.1 - Denial of Service via Generated Column Bitmask Handling
CVSS 9.8
CVE-2019-14842 CRITICAL
libnbd < 1.0.3 - Remote Code Execution via Negative Chunk Offset in Structured Reply
CVSS 9.8
CVE-2019-10203 MEDIUM
PowerDNS pdns <4.0.9, <4.1.11 - DoS
CVSS 4.3
CVE-2019-16200 HIGH
GNU Serveez <0.2.2 - Info Disclosure
CVSS 7.5
CVE-2019-1010204 MEDIUM
GNU binutils 2.21-2.31.1 and binutils_gold 1.11-1.16 - Denial of Service via Invalid ELF e_shoff Header
CVSS 5.5
CVE-2019-9749 HIGH
Fluent Bit <1.0.4 - Memory Corruption
CVSS 7.5
CVE-2019-7310 HIGH
Poppler 0.73.0 - Heap-Based Buffer Over-Read via XRef::getEntry Integer Signedness Error
CVSS 7.8
CVE-2018-8786 CRITICAL
FreeRDP <2.0.0-rc4 - Memory Corruption
CVSS 9.8
CVE-2018-3999 HIGH
Atlantis Word Processor 3.2.5.0 - Stack-Based Buffer Overflow in JPEG Parser
CVSS 7.8
CVE-2018-1000224 HIGH
Godot Engine < 2.1.5 and 3.0 < 3.0.6 - Denial of Service via Malformed Network Packet
CVSS 7.5
CVE-2018-10887 HIGH
libgit2 < 0.27.3 - Integer Overflow and Out-of-Bounds Read in git_delta_apply
CVSS 8.1
Details
Vulnerabilities 116
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits