cve.bz

CWE-190: Integer Overflow or Wraparound (Year 2038 problem, Y2K38, Y2038, Epochalypse), page 33

Filter

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

What the weakness is: CWE-190 at MITRE

Ask an AI about CWE-190

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-190: Integer Overflow or Wraparound and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/190.html and https://cve.bz/cve/cwe/190?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.8CVE-2023-36327EPSS 0.9%

    Integer Overflow vulnerability in RELIC before commit 421f2e91cf2ba42473d4d54daf24e295679e290e, allows attackers to execute arbitrary code and cause a denial of service in pos argument in bn_get_prime function.

  2. 9.8CVE-2023-36326EPSS 0.9%

    Integer Overflow vulnerability in RELIC before commit 34580d840469361ba9b5f001361cad659687b9ab, allows attackers to execute arbitrary code, cause a denial of service, and escalate privileges when calling realloc function in bn_grow functio…

  3. 9.8CVE-2023-40186EPSS 1.4%

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the `gdi_CreateSurface` function. …

  4. 7.8CVE-2023-40022EPSS 0.3%

    Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.6.0 and prior are vulnerable to integer overflow in `consume_count` of `src/gnu_v2/cplus-dem.c`. The overflow check is valid logic but, is missing the …

  5. 7.5CVE-2020-21699EPSS 0.8%

    The web server Tengine 2.2.2 developed in the Nginx version from 0.5.6 thru 1.13.2 is vulnerable to an integer overflow vulnerability in the nginx range filter module, resulting in the leakage of potentially sensitive information triggered…

  6. 3.3CVE-2020-19909EPSS 0.4%

    Integer overflow vulnerability in tool_operate.c in curl 7.65.2 via a large value as the retry delay. NOTE: many parties report that this has no direct security impact on the curl user; however, it may (in theory) cause a denial of service…

  7. 7.5CVE-2023-39125EPSS 0.7%

    NTSC-CRT 2.2.1 has an integer overflow and out-of-bounds write in loadBMP in bmp_rw.c because a file's width, height, and BPP are not validated. NOTE: the vendor's perspective is "this main application was not intended to be a well tested …

  8. 7.5CVE-2023-2914EPSS 40%

    The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, an integer overflow condition exists in the affected products. When the ThinManager processes incoming messages, a read access violat…

  9. 5.5CVE-2021-28429EPSS 0.2%

    Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service (DoS) via crafted .mov file.

  10. 5.5CVE-2021-28025EPSS 0.3%

    Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a denial of service (DoS).

  11. 9.8CVE-2023-35085EPSS 1.0%

    An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings enabled could allow a Remote Code Execution (RCE). Affected Products: All UniFi Access…

  12. 9.8CVE-2023-36911EPSS 1.7%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  13. 9.8CVE-2023-36910EPSS 2.5%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  14. 7.8CVE-2023-36900EPSS 10%

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

  15. 7.8CVE-2023-36866EPSS 0.8%

    Microsoft Office Visio Remote Code Execution Vulnerability

  16. 9.8CVE-2023-35385EPSS 2.5%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  17. 7.5CVE-2023-35383EPSS 3.0%

    Microsoft Message Queuing Information Disclosure Vulnerability

  18. 8.8CVE-2023-35381EPSS 1.9%

    Windows Fax Service Remote Code Execution Vulnerability

  19. 7.8CVE-2023-35372EPSS 1.0%

    Microsoft Office Visio Remote Code Execution Vulnerability

  20. 7.8CVE-2023-28537EPSS 0.1%

    Memory corruption while allocating memory in COmxApeDec module in Audio.

  21. 7.8CVE-2023-22666EPSS 0.1%

    Memory Corruption in Audio while playing amrwbplus clips with modified content.

  22. 6.5CVE-2023-38698EPSS 0.8%

    Ethereum Name Service (ENS) is a distributed, open, and extensible naming system based on the Ethereum blockchain. According to the documentation, controllers are allowed to register new domains and extend the expiry of existing domains, b…

  23. 7.5CVE-2023-3107EPSS 0.6%

    A set of carefully crafted ipv6 packets can trigger an integer overflow in the calculation of a fragment reassembled packet's payload length field. This allows an attacker to trigger a kernel panic, resulting in a denial of service.

  24. 5.5CVE-2023-38560EPSS 0.3%

    An integer overflow flaw was found in pcl/pl/plfont.c:418 in pl_glyph_name in ghostscript. This issue may allow a local attacker to cause a denial of service via transforming a crafted PCL file to PDF format.

  25. 9.8CVE-2023-36495EPSS 1.3%

    An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.6, macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execu…

  26. 7.5CVE-2022-41409EPSS 1.1%

    Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.

  27. 7.8CVE-2022-33065EPSS 0.4%

    Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.

  28. 7.5CVE-2023-38403EPSS 2.0%

    iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.

  29. 7.8CVE-2023-21241EPSS 0.10%

    In rw_i93_send_to_upper of rw_i93.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for e…

  30. 8.8CVE-2023-35364EPSS 0.5%

    Windows Kernel Elevation of Privilege Vulnerability

  31. 5.5CVE-2023-35341EPSS 0.5%

    Microsoft DirectMusic Information Disclosure Vulnerability

  32. 8.8CVE-2023-35315EPSS 0.7%

    Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability

  33. 7.8CVE-2023-35312EPSS 0.5%

    Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability

  34. 7.8CVE-2023-32051EPSS 0.8%

    Raw Image Extension Remote Code Execution Vulnerability

  35. 7.8CVE-2023-22667EPSS 0.1%

    Memory Corruption in Audio while allocating the ion buffer during the music playback.

  36. 6.7CVE-2023-20756EPSS 0.09%

    In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS075…

  37. 6.7CVE-2023-20755EPSS 0.1%

    In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS075…

  38. 7.5CVE-2023-20693EPSS 0.4%

    In wlan firmware, there is possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664…

  39. 7.5CVE-2023-20691EPSS 0.4%

    In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0766473…

  40. 7.5CVE-2023-20690EPSS 0.4%

    In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0766473…

  41. 7.5CVE-2023-20689EPSS 0.4%

    In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0766474…

  42. 7.1CVE-2023-25516EPSS 0.2%

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause an integer overflow, which may lead to information disclosure and denial of service.

  43. 7.5CVE-2023-21193EPSS 0.4%

    In VideoFrame of VideoFrame.h, there is a possible abort due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: …

  44. 7.8CVE-2023-25004EPSS 0.2%

    A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lead to code execution.

  45. 9.8CVE-2022-48336EPSS 1.1%

    Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagParseAndStoreData integer overflow and resultant buffer overflow.

  46. 9.8CVE-2022-48335EPSS 1.1%

    Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagVerifyProvisioning integer overflow and resultant buffer overflow.

  47. 9.8CVE-2022-48334EPSS 0.9%

    Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys total_len+file_name_len integer overflow and resultant buffer overflow.

  48. 9.8CVE-2022-48333EPSS 0.9%

    Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys prefix_len+feature_name_len integer overflow and resultant buffer overflow.

  49. 9.8CVE-2022-48332EPSS 0.9%

    Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys file_name_len integer overflow and resultant buffer overflow.

  50. 9.8CVE-2022-48331EPSS 0.9%

    Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys feature_name_len integer overflow and resultant buffer overflow.