CWE-190: Integer Overflow or Wraparound (Year 2038 problem, Y2K38, Y2038, Epochalypse), page 32

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

What the weakness is: CWE-190 at MITRE

1. 4.3CVE-2023-48234EPSS 0.8%2023-11-16

   Vim is an open source command line text editor. When getting the count for a normal mode z command, it may overflow for large counts given. Impact is low, user interaction is required and a crash may not even happen in all situations. This…

2. 4.3CVE-2023-48233EPSS 0.8%2023-11-16

   Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a (signed) long variable, abort with e_value_too_large. Impact is low, user interaction is required and a crash may not even ha…

3. 5.5CVE-2023-22305EPSS 0.2%2023-11-14

   Integer overflow in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local access.

4. 7.2CVE-2023-36401EPSS 1.9%2023-11-14

   Microsoft Remote Registry Service Remote Code Execution Vulnerability

5. 7.5CVE-2023-36395EPSS 2.5%2023-11-14

   Windows Deployment Services Denial of Service Vulnerability

6. 6.7CVE-2023-4949EPSS 0.2%2023-11-10

   An attacker with local access to a system (either through a disk or external drive) can present a modified XFS partition to grub-legacy in such a way to exploit a memory corruption in grub’s XFS file system implementation.

7. 7.8CVE-2023-4295EPSS 0.3%2023-11-07

   A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.

8. 8.8CVE-2023-5849EPSS 1.3%2023-11-01

   Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

9. 7.8CVE-2023-21375EPSS 0.1%2023-10-30

   In Sysproxy, there is a possible out of bounds write due to an integer underflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

10. 6.7CVE-2023-21371EPSS 0.10%2023-10-30

    In Secure Element, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

11. 6.7CVE-2023-21370EPSS 0.10%2023-10-30

    In the Security Element API, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

12. 5.5CVE-2023-46246EPSS 0.4%2023-10-27

    Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function `ga_grow_inner` in in the file `src/alloc.c` at line 748, which is freed in the file `src/ex_docmd.c` in the function `do_cm…

13. 8.8CVE-2023-42295EPSS 1.0%2023-10-23

    An issue in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of service via the read_rle_image function of file bifs/unquantize.c

14. 7.8CVE-2023-45681EPSS 0.5%2023-10-21

    stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory write past an allocated heap buffer in `start_decoder`. The root cause is a potential integer overflow in `sizeof(char*) * …

15. 7.8CVE-2023-3487EPSS 0.3%2023-10-20

    An integer overflow in Silicon Labs Gecko Bootloader version 4.3.1 and earlier allows unbounded memory access when reading from or writing to storage slots.

16. 7.8CVE-2023-38127EPSS 0.7%2023-10-19

    An integer overflow exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372. A specially crafted document can cause the parser to make an under-sized allocation, which can later allow for memory corruption, potentially re…

17. 7.8CVE-2023-46228EPSS 0.3%2023-10-19

    zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c.

18. 9.8CVE-2023-45853EPSS 3.4%2023-10-14

    MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizi…

19. 5.5CVE-2023-42752EPSS 0.3%2023-10-13

    An integer overflow flaw was found in the Linux kernel. This issue leads to the kernel allocating `skb_shared_info` in the userspace, which is exploitable in systems without SMAP protection since `skb_shared_info` contains references to fu…

20. 5.5CVE-2023-42298EPSS 0.2%2023-10-12

    An issue in GPAC GPAC v.2.2.1 and before allows a local attacker to cause a denial of service via the Q_DecCoordOnUnitSphere function of file src/bifs/unquantize.c.

21. 9.8CVE-2023-35968EPSS 0.9%2023-10-11

    Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network r…

22. 9.8CVE-2023-35967EPSS 0.9%2023-10-11

    Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network r…

23. 9.8CVE-2023-35966EPSS 0.9%2023-10-11

    Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network request to tri…

24. 9.8CVE-2023-35965EPSS 0.9%2023-10-11

    Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network request to tri…

25. 8.8CVE-2023-37536EPSS 1.9%2023-10-11

    An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request.

26. 7.3CVE-2023-36593EPSS 0.8%2023-10-10

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

27. 7.3CVE-2023-36582EPSS 0.8%2023-10-10

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

28. 5.5CVE-2023-36576EPSS 0.9%2023-10-10

    Windows Kernel Information Disclosure Vulnerability

29. 7.5CVE-2023-36478EPSS 4.8%2023-10-10

    Eclipse Jetty provides a web server and servlet container. In versions 11.0.0 through 11.0.15, 10.0.0 through 10.0.15, and 9.0.0 through 9.4.52, an integer overflow in `MetaDataBuilder.checkSize` allows for HTTP/2 HPACK header values to ex…

30. 7.8CVE-2023-43787EPSS 0.5%2023-10-10

    A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated privileges.

31. 6.5CVE-2023-41175EPSS 1.3%2023-10-05

    A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw allows remote attackers to cause a denial of service or possibly execute an arbitrary code via a crafted tiff image, which triggers a…

32. 6.5CVE-2023-40745EPSS 1.4%2023-10-05

    LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.

33. 6.7CVE-2023-32829EPSS 0.09%2023-10-02

    In apusys, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0771347…

34. 6.7CVE-2023-32828EPSS 0.10%2023-10-02

    In vpu, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767817; …

35. 6.7CVE-2023-32823EPSS 0.09%2023-10-02

    In rpmb , there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0791296…

36. 7.5CVE-2023-5173EPSS 0.9%2023-09-27

    In a non-standard configuration of Firefox, an integer overflow could have occurred based on network traffic (possibly under influence of a local unprivileged webpage), leading to an out-of-bounds write to privileged process memory. *This…

37. 7.8CVE-2023-38150EPSS 0.6%2023-09-12

    Windows Kernel Elevation of Privilege Vulnerability

38. 7.8CVE-2023-38142EPSS 5.6%2023-09-12

    Windows Kernel Elevation of Privilege Vulnerability

39. 7.8CVE-2023-36792EPSS 1.2%2023-09-12

    Visual Studio Remote Code Execution Vulnerability

40. 3.3CVE-2023-40218EPSS 0.2%2023-09-12

    An issue was discovered in the NPU kernel driver in Samsung Exynos Mobile Processor 9820, 980, 2100, 2200, 1280, and 1380. An integer overflow can bypass detection of error cases via a crafted application.

41. 8.7CVE-2023-28831EPSS 1.1%2023-09-12

    The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated …

42. 9.8CVE-2023-35681EPSS 0.6%2023-09-11

    In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed fo…

43. 8.8CVE-2023-35673EPSS 0.2%2023-09-11

    In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not…

44. 8.6CVE-2023-4576EPSS 0.8%2023-09-11

    On Windows, an integer overflow could occur in `RecordedSourceSurfaceCreation` which resulted in a heap buffer overflow potentially leaking sensitive data that could have led to a sandbox escape. *This bug only affects Firefox on Windows. …

45. 3.3CVE-2023-40353EPSS 0.2%2023-09-08

    An issue was discovered in Exynos Mobile Processor 980 and 2100. An integer overflow at a buffer index can prevent the execution of requested services via a crafted application.

46. 7.8CVE-2023-21655EPSS 0.1%2023-09-05

    Memory corruption in Audio while validating and mapping metadata.

47. 7.8CVE-2023-21644EPSS 0.1%2023-09-05

    Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request.

48. 7.8CVE-2023-4734EPSS 0.5%2023-09-02

    Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.

49. 5.5CVE-2023-4722EPSS 0.3%2023-09-01

    Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.3-DEV.

50. 9.8CVE-2023-36328EPSS 1.3%2023-09-01

    Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS).