cve.bz

CWE-190: Integer Overflow or Wraparound (Year 2038 problem, Y2K38, Y2038, Epochalypse), page 25

Filter

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

What the weakness is: CWE-190 at MITRE

Ask an AI about CWE-190

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-190: Integer Overflow or Wraparound and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/190.html and https://cve.bz/cve/cwe/190?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2022-49222EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: drm/bridge: anx7625: Fix overflow issue on reading EDID The length of EDID block can be longer than 256 bytes, so we should use `int` instead of `u8` for the `edid_pos` …

  2. 5.5CVE-2022-49197EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: af_netlink: Fix shift out of bounds in group mask calculation When a netlink message is received, netlink_recvmsg() fills in the address of the sender. One of the fields…

  3. 5.5CVE-2022-49075EPSS 0.7%

    In the Linux kernel, the following vulnerability has been resolved: btrfs: fix qgroup reserve overflow the qgroup limit We use extent_changeset->bytes_changed in qgroup_reserve_data() to record how many bytes we set for EXTENT_QGROUP_RES…

  4. 5.9CVE-2025-0838EPSS 0.6%

    There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for …

  5. 7.1CVE-2024-57262EPSS 0.3%

    In barebox before 2025.01.0, ext4fs_read_symlink has an integer overflow for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwri…

  6. 7.1CVE-2024-57261EPSS 0.3%

    In barebox before 2025.01.0, request2size in common/dlmalloc.c has an integer overflow, a related issue to CVE-2024-57258.

  7. 7.8CVE-2024-57258EPSS 0.2%

    Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, or because ptrdiff_t is mishandled on x86_64.

  8. 6.8CVE-2024-57256EPSS 0.4%

    An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memo…

  9. 6.8CVE-2024-57255EPSS 0.4%

    An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.

  10. 6.8CVE-2024-57254EPSS 0.4%

    An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a crafted squashfs filesystem.

  11. 3.3CVE-2023-34406EPSS 0.2%

    An issue was discovered on Mercedes Benz NTG 6. A possible integer overflow exists in the user data import/export function of NTG (New Telematics Generation) 6 head units. To perform this attack, local access to USB interface of the car is…

  12. 9.8CVE-2023-34399EPSS 0.8%

    Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The version of boost library contains vulnerability integer overflow.

  13. 7.3CVE-2024-11347EPSS 0.4%

    Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Forced Integer Overflow.The vulnerability can be leveraged by an attacker to execute arbitrary code as an unp…

  14. 6.5CVE-2024-53880EPSS 0.5%

    NVIDIA Triton Inference Server contains a vulnerability in the model loading API, where a user could cause an integer overflow or wraparound error by loading a model with an extra-large file size that overflows an internal variable. A succ…

  15. 2.3CVE-2023-20507EPSS 0.2%

    An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data integrity.

  16. 8.8CVE-2025-21369EPSS 2.2%

    Microsoft Digest Authentication Remote Code Execution Vulnerability

  17. 5.5CVE-2025-0302EPSS 0.2%

    in OpenHarmony v4.1.2 and prior versions allow a local attacker cause DOS through integer overflow.

  18. 5.3CVE-2024-13614EPSS 0.1%

    Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security for Windows, Kaspersky Small Office Security, Kaspersky for Windows (Standard, Plu…

  19. 8.4CVE-2024-34733EPSS 0.09%

    In DevmemXIntMapPages of devicemem_server.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User inter…

  20. 5.7CVE-2017-13318EPSS 0.1%

    In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is neede…

  21. 7.8CVE-2025-24156EPSS 0.5%

    An integer overflow was addressed through improved input validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to elevate privileges.

  22. 5.5CVE-2024-57938EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: net/sctp: Prevent autoclose integer overflow in sctp_association_init() While by default max_autoclose equals to INT_MAX / HZ, one may set net.sctp.max_autoclose to UINT…

  23. 5.5CVE-2024-57890EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Prevent integer overflow issue In the expression "cmd.wqe_size * cmd.wr_count", both variables are u32 values that come from the user so the multiplication …

  24. 7.8CVE-2025-21382EPSS 0.5%

    Windows Graphics Component Elevation of Privilege Vulnerability

  25. 7.8CVE-2025-21338EPSS 0.5%

    GDI+ Remote Code Execution Vulnerability

  26. 8.8CVE-2025-21244EPSS 1.7%

    Windows Telephony Service Remote Code Execution Vulnerability

  27. 8.8CVE-2025-21243EPSS 1.7%

    Windows Telephony Service Remote Code Execution Vulnerability

  28. 7.5CVE-2025-21172EPSS 1.8%

    .NET and Visual Studio Remote Code Execution Vulnerability

  29. 6.5CVE-2024-46669EPSS 0.6%

    An Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2.10 and below; FortiSASE version 23.4.b FortiOS tenant IPsec IKE service may allow an authenticated attacker to crash the IPsec tunnel via cra…

  30. 5.5CVE-2024-56368EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix overflow in __rb_map_vma An overflow occurred when performing the following calculation: nr_pages = ((nr_subbufs + 1) << subbuf_order) - pgoff; Add…

  31. 6.2CVE-2025-23022EPSS 0.2%

    FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c.

  32. 9.3CVE-2025-23016EPSS 0.6%

    FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.

  33. 9.8CVE-2024-40765EPSS 0.8%

    An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a specially crafted IKEv2 payload.

  34. 8.8CVE-2024-55656EPSS 17%

    RedisBloom adds a set of probabilistic data structures to Redis. There is an integer overflow vulnerability in RedisBloom, which is a module used in Redis. The integer overflow vulnerability allows an attacker (a redis client which knows t…

  35. 7.0CVE-2024-51737EPSS 0.4%

    RediSearch is a Redis module that provides querying, secondary indexing, and full-text search for Redis. An authenticated redis user executing FT.SEARCH or FT.AGGREGATE with a specially crafted LIMIT command argument, or FT.SEARCH with a s…

  36. 7.0CVE-2024-51480EPSS 0.2%

    RedisTimeSeries is a time-series database (TSDB) module for Redis, by Redis. Executing one of these commands TS.QUERYINDEX, TS.MGET, TS.MRAGE, TS.MREVRANGE by an authenticated user, using specially crafted command arguments may cause an in…

  37. 5.5CVE-2024-56451EPSS 0.1%

    Integer overflow vulnerability during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability.

  38. 7.8CVE-2024-45555EPSS 0.1%

    Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected into security-sensitive images, enabling the booting of a tampered IFS2 system imag…

  39. 6.2CVE-2024-36613EPSS 0.3%

    FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an integer overflow, potentially resulting in a denial-of-service (DoS) condition or other undefined behavior.

  40. 9.8CVE-2024-50944EPSS 1.0%

    Integer overflow vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f in the shopping cart functionality. The issue lies in the quantity parameter in the CartController's AddToCart method.

  41. 5.5CVE-2024-53187EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: io_uring: check for overflows in io_pin_pages WARNING: CPU: 0 PID: 5834 at io_uring/memmap.c:144 io_pin_pages+0x149/0x180 io_uring/memmap.c:144 CPU: 0 UID: 0 PID: 5834 C…

  42. 6.5CVE-2024-51540EPSS 0.4%

    Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user with bucket or object-level access and the necessary privileges could potentially exploit t…

  43. 5.5CVE-2024-53161EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: EDAC/bluefield: Fix potential integer overflow The 64-bit argument for the "get DIMM info" SMC call consists of mem_ctrl_idx left-shifted 16 bits and OR-ed with DIMM ind…

  44. 5.5CVE-2024-53151EPSS 0.6%

    In the Linux kernel, the following vulnerability has been resolved: svcrdma: Address an integer overflow Dan Carpenter reports: > Commit 78147ca8b4a9 ("svcrdma: Add a "parsed chunk list" data > structure") from Jun 22, 2020 (linux-next),…

  45. 5.5CVE-2024-53146EPSS 0.5%

    In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is >= U32_MAX - 3 then the "length + 4" addition can result in an integer overflow. Address this by splittin…

  46. 5.5CVE-2024-53145EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: um: Fix potential integer overflow during physmem setup This issue happens when the real map size is greater than LONG_MAX, which can be easily triggered on UML/i386.

  47. 6.9CVE-2024-52059EPSS 0.2%

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in RTI Connext Professional (Security Plugins) allows Overflow Variables and Tags. This issue …

  48. 9.8CVE-2024-49112EPSS 72%

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

  49. 7.2CVE-2024-49089EPSS 2.1%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  50. 8.8CVE-2024-49085EPSS 1.6%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability