CWE-681

High likelihood

Incorrect Conversion between Numeric Types

Parent: CWE-704 - Incorrect Type Conversion or Cast

When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.

116 vulnerabilities with CWE-681

CVE-2018-5711 MEDIUM

GD Graphics Library <7.2.1 - Buffer Overflow

CVSS 5.5

CVE-2018-5251 MEDIUM

libming 0.4.8 - Denial of Service via Crafted SWF File

CVSS 6.5

CVE-2017-17446 MEDIUM

Game_Music_Emu 0.6.1 - Denial of Service via Negative Size in Mem_File_Reader::read_avail

CVSS 6.5

CVE-2017-0857 HIGH

Android 7.0 7.1.1 7.1.2 8.0 - Denial of Service via Divide By Zero

CVSS 7.5

CVE-2017-12140 MEDIUM

ImageMagick 7.0.6-1 - Memory Corruption

CVSS 6.5

CVE-2017-7308 HIGH

AF_PACKET packet_set_ring Privilege Escalation

CVSS 7.8

CVE-2016-3074 CRITICAL

libgd 2.1.1 - Denial of Service and Potential Remote Code Execution via Crafted Compressed GD2 Data

CVSS 9.8

CVE-2015-3406 HIGH

Module::Signature <0.74 - Code Injection

CVSS 7.5

CVE-2014-125012 MEDIUM

FFmpeg 2.0 - Integer Coercion Error

CVSS 5.3

CVE-2014-125011 MEDIUM

FFmpeg 2.0 - Integer Coercion Error

CVSS 5.3

CVE-2010-2807

FreeType <2.4.2 - DoS/Code Injection

CVE-2009-0231 HIGH

Microsoft Windows - Remote Code Execution via Crafted EOT Font Name Table

CVSS 8.8

CVE-2008-3282 HIGH

OpenOffice.org 2.4.1 - Denial of Service via Integer Overflow in Memory Allocator

CVSS 7.8

CVE-2008-1721

Python < 2.4.6 - Remote Code Execution via Integer Signedness Error in zlib Extension

CVE-2007-4268 HIGH

Apple Mac OS X 10.4-10.4.10 - Local Arbitrary Code Execution via AppleTalk Message

CVSS 7.8

CVE-2007-4988 HIGH

ImageMagick < 6.3.5-9 - Remote Code Execution via Crafted DIB Image Width

CVSS 7.8

Details

Vulnerabilities 116

Exploit Likelihood High

Links