cve.bz

CWE-190: Integer Overflow or Wraparound (Year 2038 problem, Y2K38, Y2038, Epochalypse), page 28

Filter

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

What the weakness is: CWE-190 at MITRE

Ask an AI about CWE-190

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-190: Integer Overflow or Wraparound and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/190.html and https://cve.bz/cve/cwe/190?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2022-48806EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX Commit effa453168a7 ("i2c: i801: Don't silently correct invalid transfer size") revealed that ee1004_eeprom_read()…

  2. 7.8CVE-2024-41000EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: block/ioctl: prefer different overflow check Running syzkaller with the newly reintroduced signed integer overflow sanitizer shows this report: [ 62.982337] ---------…

  3. 7.8CVE-2024-40994EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: ptp: fix integer overflow in max_vclocks_store On 32bit systems, the "4 * max" multiply can overflow. Use kcalloc() to do the allocation to prevent this.

  4. 9.0CVE-2024-37310EPSS 0.7%

    EVerest is an EV charging software stack. An integer overflow in the "v2g_incoming_v2gtp" function in the v2g_server.cpp implementation can allow a remote attacker to overflow the process' heap. This vulnerability is fixed in 2024.3.1 and …

  5. 7.8CVE-2024-23695EPSS 0.1%

    In CacheOpPMRExec of cache_km.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not nee…

  6. 7.8CVE-2024-34139EPSS 0.4%

    Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user int…

  7. 7.8CVE-2024-39684EPSS 0.4%

    Tencent RapidJSON is vulnerable to privilege escalation due to an integer overflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader.h` when parsing JSON text from a stream. An attacker needs to send the victim a …

  8. 7.8CVE-2024-38080KEVEPSS 7.1%

    Windows Hyper-V Elevation of Privilege Vulnerability

  9. 7.8CVE-2024-38034EPSS 0.8%

    Windows Filtering Platform Elevation of Privilege Vulnerability

  10. 7.2CVE-2024-38019EPSS 1.8%

    Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

  11. 8.8CVE-2024-37336EPSS 1.7%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

  12. 8.8CVE-2024-37323EPSS 1.6%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

  13. 6.8CVE-2024-26184EPSS 1.0%

    Secure Boot Security Feature Bypass Vulnerability

  14. 8.8CVE-2024-21428EPSS 1.8%

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

  15. 9.8CVE-2024-1305EPSS 15%

    tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory buffers, resulting in a bug check and potentially arbitrary code execution in …

  16. 7.2CVE-2023-45742EPSS 1.2%

    An integer overflow vulnerability exists in the boa updateConfigIntoFlash functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary code execution. An attacker can send a sequenc…

  17. 7.8CVE-2024-23372EPSS 0.1%

    Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.

  18. 5.5CVE-2024-38661EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: s390/ap: Fix crash in AP internal function modify_bitmap() A system crash like this Failing address: 200000cb7df6f000 TEID: 200000cb7df6f403 Fault in home space mod…

  19. 5.5CVE-2024-38624EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow For example, in the expression: vbo = 2 * vbo + skip

  20. 5.5CVE-2024-37356EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). In dctcp_update_alpha(), we use a module parameter dctcp_shift_g as follows: alpha -= min_not_zero(alpha, alpha …

  21. 8.2CVE-2024-37305EPSS 0.4%

    oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and S/MIME using post-quantum algorithms from liboqs. Flaws have been identified in the way oqs-provider handl…

  22. 9.8CVE-2024-32913EPSS 0.3%

    In wl_notify_rx_mgmt_frame of wl_cfg80211.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for ex…

  23. 7.8CVE-2024-29784EPSS 0.08%

    In prepare_response of lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed …

  24. 7.8CVE-2024-30072EPSS 0.9%

    Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability

  25. 5.5CVE-2024-30067EPSS 0.6%

    Winlogon Elevation of Privilege Vulnerability

  26. 8.8CVE-2024-30064EPSS 0.8%

    Windows Kernel Elevation of Privilege Vulnerability

  27. 8.8CVE-2024-27833EPSS 0.8%

    An integer overflow was addressed with improved input validation. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, tvOS 17.5, visionOS 1.2. Processing maliciously crafted web content may lead to a…

  28. 6.5CVE-2024-36968EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() l2cap_le_flowctl_init() can cause both div-by-zero and an integer overflow since hdev->le_mtu may not fall i…

  29. 7.5CVE-2023-49441EPSS 0.7%

    dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.

  30. 10.0CVE-2024-5171EPSS 1.3%

    Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in…

  31. 9.1CVE-2024-36121EPSS 0.3%

    netty-incubator-codec-ohttp is the OHTTP implementation for netty. BoringSSLAEADContext keeps track of how many OHTTP responses have been sent and uses this sequence number to calculate the appropriate nonce to use with the encryption algo…

  32. 5.9CVE-2024-5197EPSS 0.8%

    There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some …

  33. 7.8CVE-2023-43545EPSS 0.1%

    Memory corruption when more scan frequency list or channels are sent from the user space.

  34. 5.5CVE-2024-36948EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: drm/xe/xe_migrate: Cast to output precision before multiplying operands Addressing potential overflow in result of multiplication of two lower precision (u32) operands …

  35. 5.5CVE-2024-36918EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: bpf: Check bloom filter map value size This patch adds a missing check to bloom filter creating, rejecting values above KMALLOC_MAX_SIZE. This brings the bloom map in li…

  36. 5.5CVE-2024-36917EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: block: fix overflow in blk_ioctl_discard() There is no check for overflow of 'start + len' in blk_ioctl_discard(). Hung task occurs if submit an discard ioctl with the f…

  37. 7.0CVE-2024-30212EPSS 0.6%

    If a SCSI READ(10) command is initiated via USB using the largest LBA (0xFFFFFFFF) with it's default block size of 512 and a count of 1, the first 512 byte of the 0x80000000 memory area is returned to the user. If the block count is inc…

  38. 7.8CVE-2024-4453EPSS 1.6%

    GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to…

  39. 5.5CVE-2023-52857EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix coverity issue with unintentional integer overflow 1. Instead of multiplying 2 variable of different types. Change to assign a value of one variable an…

  40. 5.5CVE-2023-52762EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: virtio-blk: fix implicit overflow on virtio_max_dma_size The following codes have an implicit conversion from size_t to u32: (u32)max_size = (size_t)virtio_max_dma_size(…

  41. 5.5CVE-2021-47432EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Don't overflow in peek() When we started spreading new inode numbers throughout most of the 64 bit inode space, that triggered some corner case…

  42. 7.8CVE-2024-35905EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduces protection against the size of access to stack memory being negative; the access size ca…

  43. 5.5CVE-2023-52676EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: bpf: Guard stack limits against 32bit overflow This patch promotes the arithmetic around checking stack bounds to be done in the 64-bit domain, instead of the current 32…

  44. 5.5CVE-2024-35827EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: io_uring/net: fix overflow check in io_recvmsg_mshot_prep() The "controllen" variable is type size_t (unsigned long). Casting it to int could lead to an integer underfl…

  45. 6.8CVE-2024-30021EPSS 0.8%

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability

  46. 6.8CVE-2024-30012EPSS 0.9%

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability

  47. 6.8CVE-2024-30005EPSS 0.9%

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability

  48. 6.8CVE-2024-30004EPSS 0.9%

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability

  49. 6.8CVE-2024-30003EPSS 0.9%

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability

  50. 6.8CVE-2024-30001EPSS 0.9%

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability