CWE-1335: Incorrect Bitwise Shift of Integer
Filter
An integer value is specified to be shifted by a negative amount or an amount greater than or equal to the number of bits contained in the value.
What the weakness is: CWE-1335 at MITRE. All weaknesses
Ask an AI about CWE-1335
Show the prompt
Explain CWE-1335: Incorrect Bitwise Shift of Integer and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1335.html and https://cve.bz/cve/cwe/1335?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 8.7CVE-2026-93925EPSS 0.3%
Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in Apache Thrift C++ THeaderProtocol. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the …
- 7.5CVE-2026-88357EPSS 0.6%
nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addresses at odd offsets to be cast to uint16_t or wider integer pointers and directl…
- 6.5CVE-2026-5072EPSS 0.3%
A bitwise shift vulnerability in Zephyr's PTP subsystem allows a remote attacker to cause undefined behavior and potential system crashes. An attacker sends a crafted PTP_MSG_MANAGEMENT message to set an unvalidated negative log_announce_i…
- 6.5CVE-2026-4426EPSS 0.3%
A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO9660 Rock Ridge extensions. A remote attacker can exploit th…
- 6.9CVE-2025-32029EPSS 0.2%
ts-asn1-der is a collection of utility classes to encode ASN.1 data following DER rule. Incorrect number DER encoding can lead to denial on service for absolute values in the range 2**31 -- 2**32 - 1. The arithmetic in the numBitLen didn't…
- 7.8CVE-2023-52810EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add check for negative db_l2nbperpage l2nbperpage is log2(number of blks per page), and the minimum legal value should be 0, not negative. In the case of l2nbpe…
- 5.5CVE-2023-3161EPSS 0.2%
A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined b…
- 8.8CVE-2016-9842EPSS 5.2%
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.