cve.bz

CWE-190: Integer Overflow or Wraparound (Year 2038 problem, Y2K38, Y2038, Epochalypse), page 29

Filter

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

What the weakness is: CWE-190 at MITRE

Ask an AI about CWE-190

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-190: Integer Overflow or Wraparound and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/190.html and https://cve.bz/cve/cwe/190?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.8CVE-2024-30000EPSS 0.9%

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability

  2. 6.8CVE-2024-29999EPSS 0.9%

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability

  3. 6.8CVE-2024-29997EPSS 0.9%

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability

  4. 8.1CVE-2024-32655EPSS 1.7%

    Npgsql is the .NET data provider for PostgreSQL. The `WriteBind()` method in `src/Npgsql/Internal/NpgsqlConnector.FrontendMessages.cs` uses `int` variables to store the message length and the sum of parameter lengths. Both variables overfl…

  5. 5.5CVE-2024-3757EPSS 0.2%

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through integer overflow.

  6. 7.8CVE-2023-43530EPSS 0.1%

    Memory corruption in HLOS while checking for the storage type.

  7. 7.8CVE-2023-44443EPSS 94%

    GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability …

  8. 7.5CVE-2023-41185EPSS 0.8%

    Unified Automation UaGateway Certificate Parsing Integer Overflow Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway…

  9. 8.8CVE-2023-40475EPSS 2.1%

    GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to expl…

  10. 8.8CVE-2023-40474EPSS 2.1%

    GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to expl…

  11. 8.8CVE-2023-38104EPSS 1.4%

    GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required t…

  12. 8.8CVE-2023-38103EPSS 1.5%

    GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required t…

  13. 8.8CVE-2023-37327EPSS 1.7%

    GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exp…

  14. 5.9CVE-2024-34403EPSS 1.3%

    An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.

  15. 8.6CVE-2024-34402EPSS 1.2%

    An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer overflow.

  16. 9.8CVE-2023-47212EPSS 1.4%

    A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22. A specially crafted .ogg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.

  17. 8.2CVE-2024-21905EPSS 0.5%

    An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already …

  18. 9.8CVE-2024-32039EPSS 2.3%

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients using a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to integer overflow and out-of-bounds write. Versions 3.5.0 and 2.11.6 patch the issu…

  19. 7.5CVE-2024-23531EPSS 2.4%

    An Integer Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows an unauthenticated remote attacker to perform denial of service attacks. In certain rare conditions this could also lead to reading co…

  20. 7.5CVE-2024-31031EPSS 0.9%

    An issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integer overflow.

  21. 7.8CVE-2024-26884EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: bpf: Fix hashtab overflow check on 32-bit arches The hashtab code relies on roundup_pow_of_two() to compute the number of hash buckets, and contains an overflow check by…

  22. 2.0CVE-2024-21105EPSS 0.3%

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Ora…

  23. 5.9CVE-2024-3859EPSS 0.7%

    On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by a malformed OpenType font. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.

  24. 5.5CVE-2024-26817EPSS 0.8%

    In the Linux kernel, the following vulnerability has been resolved: amdkfd: use calloc instead of kzalloc to avoid integer overflow This uses calloc instead of doing the multiplication which might overflow.

  25. 7.8CVE-2024-20795EPSS 0.4%

    Animate versions 23.0.4, 24.0.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interact…

  26. 8.8CVE-2024-28942EPSS 2.4%

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  27. 8.8CVE-2024-28936EPSS 2.4%

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  28. 8.8CVE-2024-28931EPSS 2.4%

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  29. 8.8CVE-2024-28929EPSS 2.4%

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  30. 6.4CVE-2024-28923EPSS 0.5%

    Secure Boot Security Feature Bypass Vulnerability

  31. 6.7CVE-2024-26171EPSS 0.6%

    Secure Boot Security Feature Bypass Vulnerability

  32. 3.3CVE-2024-31047EPSS 0.2%

    An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service (DoS) via the convert function of exrmultipart.cpp.

  33. 5.5CVE-2024-26668EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_limit: reject configurations that cause integer overflow Reject bogus configs where internal token counter wraps around. This only occurs with very very l…

  34. 7.8CVE-2024-21470EPSS 0.1%

    Memory corruption while allocating memory for graphics.

  35. 7.5CVE-2024-21454EPSS 0.4%

    Transient DOS while decoding the ToBeSignedMessage in Automotive Telematics.

  36. 5.4CVE-2024-20047EPSS 0.2%

    In battery, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08587865…

  37. 6.6CVE-2024-20046EPSS 0.3%

    In battery, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08…

  38. 6.5CVE-2024-3077EPSS 0.5%

    An malicious BLE device can crash BLE victim device by sending malformed gatt packet

  39. 9.8CVE-2024-2452EPSS 0.9%

    In Eclipse ThreadX NetX Duo before 6.4.0, if an attacker can control parameters of __portable_aligned_alloc() could cause an integer wrap-around and an allocation smaller than expected. This could cause subsequent heap buffer overflows.

  40. 7.8CVE-2024-2212EPSS 0.5%

    In Eclipse ThreadX before 6.4.0, xQueueCreate() and xQueueCreateSet() functions from the FreeRTOS compatibility API (utility/rtos_compatibility_layers/FreeRTOS/tx_freertos.c) were missing parameter checks. This could lead to integer wr…

  41. 5.5CVE-2021-47109EPSS 0.7%

    In the Linux kernel, the following vulnerability has been resolved: neighbour: allow NUD_NOARP entries to be forced GCed IFF_POINTOPOINT interfaces use NUD_NOARP entries for IPv6. It's possible to fill up the neighbour table with enough …

  42. 9.8CVE-2024-1917EPSS 1.1%

    Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially c…

  43. 9.8CVE-2024-1916EPSS 1.1%

    Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially c…

  44. 9.8CVE-2024-0803EPSS 1.0%

    Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially c…

  45. 5.3CVE-2024-22396EPSS 1.1%

    An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a specially crafted IKEv2 payload.

  46. 8.8CVE-2024-21450EPSS 2.0%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  47. 8.8CVE-2024-21444EPSS 1.9%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  48. 8.8CVE-2024-21441EPSS 1.9%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  49. 9.8CVE-2024-27304EPSS 1.1%

    pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be…

  50. 7.8CVE-2021-47098EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations Commit b50aa49638c7 ("hwmon: (lm90) Prevent integer underflows of temperature calculations") …