cve.bz

CWE-128: Wrap-around Error

Filter

Wrap around errors occur whenever a value is incremented past the maximum value for its type and therefore "wraps around" to a very small, negative, or undefined value.

What the weakness is: CWE-128 at MITRE. All weaknesses

Related attack patterns (CAPEC): 1
  • CAPEC-92 Forced Integer Overflow Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-128, as MITRE names them. Credits.

Ask an AI about CWE-128

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-128: Wrap-around Error and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/128.html and https://cve.bz/cve/cwe/128?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.8CVE-2026-20179EPSS 0.5%

    Multiple Cisco products are affected by a vulnerability in the Snort 3 Generic Routing Encapsulation (GRE) Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in…

  2. 8.8CVE-2026-16909EPSS 0.4%

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an off-by-one error in bounds checking.

  3. 2.0CVE-2026-54905EPSS 0.2%

    concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReentrantReadWriteLock can incorrectly grant a write lock after one thread acquires the read lock 32,768 times. The lock stores a thread's local read and w…

  4. 9.3CVE-2024-23981EPSS 0.2%

    Wrap-around error in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access.

  5. 7.5CVE-2022-35258EPSS 2.7%

    An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4, Ivanti Policy Secure (IPS) in versions prior to 9.1R17 and 22.3…