cve.bz

CWE-190: Integer Overflow or Wraparound (Year 2038 problem, Y2K38, Y2038, Epochalypse), page 30

Filter

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

What the weakness is: CWE-190 at MITRE

Ask an AI about CWE-190

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-190: Integer Overflow or Wraparound and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/190.html and https://cve.bz/cve/cwe/190?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2023-43550EPSS 0.1%

    Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem.

  2. 6.7CVE-2024-20025EPSS 0.09%

    In da, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541686; I…

  3. 9.1CVE-2024-27101EPSS 0.5%

    SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions. Integer overflow in chunking helper causes dispatching to miss elements or panic. Any SpiceDB cluster with a…

  4. 5.5CVE-2021-46940EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: tools/power turbostat: Fix offset overflow issue in index converting The idx_to_offset() function returns type int (32-bit signed), but MSR_PKG_ENERGY_STAT is u32 and wo…

  5. 9.8CVE-2024-23605EPSS 1.3%

    A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger thi…

  6. 9.8CVE-2024-23496EPSS 1.3%

    A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger …

  7. 9.8CVE-2024-21836EPSS 1.3%

    A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigge…

  8. 9.8CVE-2024-21825EPSS 1.3%

    A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a …

  9. 6.2CVE-2024-25366EPSS 0.9%

    Buffer Overflow vulnerability in mz-automation.de libiec61859 v.1.4.0 allows a remote attacker to cause a denial of service via the mmsServer_handleGetNameListRequest function to the mms_getnamelist_service component.

  10. 9.8CVE-2024-21812EPSS 1.8%

    An integer overflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to an out-of-bounds write which in turn can lead to…

  11. 2.0CVE-2024-1633EPSS 0.1%

    During the secure boot, bl2 (the second stage of the bootloader) loops over images defined in the table “bl2_mem_params_descs”. For each image, the bl2 reads the image length and destination from the image’s certificate. Because of the way…

  12. 8.8CVE-2024-1580EPSS 1.8%

    An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.

  13. 7.8CVE-2024-20730EPSS 4.4%

    Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue req…

  14. 8.8CVE-2024-21420EPSS 1.7%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  15. 7.8CVE-2024-21379EPSS 1.7%

    Microsoft Word Remote Code Execution Vulnerability

  16. 8.8CVE-2024-21372EPSS 1.8%

    Windows OLE Remote Code Execution Vulnerability

  17. 8.8CVE-2024-21350EPSS 1.5%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  18. 6.8CVE-2024-24857EPSS 0.3%

    A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function. This can result in integrity overflow issue, possibly leading to bluetooth connection abnormality or denial of service.

  19. 4.4CVE-2024-20016EPSS 0.1%

    In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation Patch ID: ALPS07835901; Issue I…

  20. 7.8CVE-2024-21851EPSS 0.2%

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow.

  21. 7.8CVE-2024-21845EPSS 0.2%

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow.

  22. 5.3CVE-2023-6780EPSS 2.7%

    An integer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an i…

  23. 7.5CVE-2024-23775EPSS 1.1%

    Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows attackers to cause a denial of service (DoS) via mbedtls_x509_set_extension().

  24. 7.4CVE-2023-40548EPSS 0.4%

    A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation op…

  25. 7.5CVE-2024-22861EPSS 0.6%

    Integer overflow vulnerability in FFmpeg before n6.1, allows attackers to cause a denial of service (DoS) via the avcodec/osq module.

  26. 9.8CVE-2024-22862EPSS 1.2%

    Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser.

  27. 9.8CVE-2024-22860EPSS 1.3%

    Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxl_anim_read_packet component in the JPEG XL Animation decoder.

  28. 9.8CVE-2023-52389EPSS 0.9%

    UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert() and Poco::UTF32::queryConvert() may return a negative integer if a UTF-32 byte sequence evaluat…

  29. 7.8CVE-2024-23307EPSS 0.6%

    Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow.

  30. 5.5CVE-2024-23851EPSS 0.3%

    copy_params in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INT_MAX bytes, and crash, because of a missing param_kernel->data_size check. This is related to ctl_ioctl.

  31. 9.8CVE-2024-22211EPSS 1.1%

    FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in `freerdp_bitmap_planar_context_reset` leads to heap-buffer overflow. This affects FreeRDP based clients. Free…

  32. 7.8CVE-2021-33631EPSS 0.4%

    Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3, from 5.10.0-60.18.0 before 5.10.0-183.0.…

  33. 7.8CVE-2023-31034EPSS 0.2%

    NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed by causing an integer overflow. A successful exploit of this vulnerability may lead to denial of service, information di…

  34. 9.8CVE-2023-49262EPSS 0.7%

    The authentication mechanism can be bypassed by overflowing the value of the Cookie "authentication" field, provided there is an active user session.

  35. 6.5CVE-2023-52339EPSS 1.1%

    In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing. It may result in buffer overflows.

  36. 5.5CVE-2023-28185EPSS 0.2%

    An integer overflow was addressed through improved input validation. This issue is fixed in tvOS 16.4, macOS Big Sur 11.7.5, iOS 16.4 and iPadOS 16.4, watchOS 9.4, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS 15.7.4. An app may be able to …

  37. 8.1CVE-2023-41056EPSS 2.6%

    Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in…

  38. 6.5CVE-2023-47996EPSS 0.7%

    An integer overflow vulnerability in Exif.cpp::jpeg_read_exif_dir in FreeImage 3.18.0 allows attackers to obtain information and cause a denial of service.

  39. 8.8CVE-2023-47994EPSS 0.7%

    An integer overflow vulnerability in LoadPixelDataRLE4 function in PluginBMP.cpp in Freeimage 3.18.0 allows attackers to obtain sensitive information, cause a denial of service and/or run arbitrary code.

  40. 8.8CVE-2023-47992EPSS 0.7%

    An integer overflow vulnerability in FreeImageIO.cpp::_MemoryReadProc in FreeImage 3.18.0 allows attackers to obtain sensitive information, cause a denial-of-service attacks and/or run arbitrary code.

  41. 7.8CVE-2024-20698EPSS 8.6%

    Windows Kernel Elevation of Privilege Vulnerability

  42. 8.0CVE-2024-20654EPSS 2.0%

    Microsoft ODBC Driver Remote Code Execution Vulnerability

  43. 9.8CVE-2024-21646EPSS 5.1%

    Azure uAMQP is a general purpose C library for AMQP 1.0. The UAMQP library is used by several clients to implement AMQP protocol communication. When clients using this library receive a crafted binary type data, an integer overflow or wra…

  44. 7.8CVE-2023-39317EPSS 0.4%

    Multiple integer overflow vulnerabilities exist in the LXT2 num_dict_entries functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger the…

  45. 7.8CVE-2023-39316EPSS 0.4%

    Multiple integer overflow vulnerabilities exist in the LXT2 num_dict_entries functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger the…

  46. 7.8CVE-2023-39275EPSS 0.4%

    Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger …

  47. 7.8CVE-2023-39274EPSS 0.4%

    Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger …

  48. 7.8CVE-2023-39273EPSS 0.4%

    Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger …

  49. 7.8CVE-2023-39272EPSS 0.4%

    Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger …

  50. 7.8CVE-2023-39271EPSS 0.4%

    Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger …