cve.bz

CWE-190: Integer Overflow or Wraparound (Year 2038 problem, Y2K38, Y2038, Epochalypse), page 34

Filter

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

What the weakness is: CWE-190 at MITRE

Ask an AI about CWE-190

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-190: Integer Overflow or Wraparound and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/190.html and https://cve.bz/cve/cwe/190?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2023-32434KEVEPSS 52%

    An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, watchOS 8.8.1, iOS 16.5.1 and iPadOS 16.5.1, macOS Ventura 1…

  2. 7.5CVE-2020-20335EPSS 1.0%

    Buffer Overflow vulnerability in Antirez Kilo before commit 7709a04ae8520c5b04d261616098cebf742f5a23 allows a remote attacker to cause a denial of service via the editorUpdateRow function in kilo.c.

  3. 7.8CVE-2023-28295EPSS 0.7%

    Microsoft Publisher Remote Code Execution Vulnerability

  4. 9.8CVE-2021-0701EPSS 0.3%

    In PVRSRVBridgeSyncPrimOpCreate of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional e…

  5. 7.5CVE-2023-34454EPSS 1.5%

    snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1, causing an unrecoverable fatal error. The function `compress(char[] input)` in the file…

  6. 7.5CVE-2023-34453EPSS 1.7%

    snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1, causing a fatal error. The function `shuffle(int[] input)` in the file `BitShuffle.java…

  7. 6.5CVE-2023-29369EPSS 2.0%

    Remote Procedure Call Runtime Denial of Service Vulnerability

  8. 7.0CVE-2023-29364EPSS 0.4%

    Windows Authentication Elevation of Privilege Vulnerability

  9. 9.8CVE-2023-33864EPSS 4.2%

    StreamReader::ReadFromExternal in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. It uses uint32_t(m_BufferSize-m_InputSize) even though m_InputSize can exceed m_BufferSize.

  10. 9.8CVE-2023-33863EPSS 4.2%

    SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-extended to 0xffffffffffffffff (SIZE_MAX) and then there is an attempt to add 1.

  11. 7.8CVE-2023-2603EPSS 0.6%

    A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.

  12. 5.5CVE-2023-34151EPSS 1.0%

    A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting double to size_t in svg, mvg and other coders (recurring bugs of CVE-2022-32546).

  13. 7.5CVE-2023-32307EPSS 1.1%

    Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. Referring to [GHSA-8599-x7rq-fr54](https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-8599-x7rq-fr54), several other potential…

  14. 7.5CVE-2022-48480EPSS 0.4%

    Integer overflow vulnerability in some phones. Successful exploitation of this vulnerability may affect service confidentiality.

  15. 9.8CVE-2023-23298EPSS 1.5%

    The `Toybox.Graphics.BufferedBitmap.initialize` API method in CIQ API version 2.3.0 through 4.1.7 does not validate its parameters, which can result in integer overflows when allocating the underlying bitmap buffer. A malicious application…

  16. 7.8CVE-2023-33204EPSS 0.3%

    sysstat through 12.7.2 allows a multiplication integer overflow in check_overflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377.

  17. 8.1CVE-2023-2512EPSS 0.6%

    Prior to version v1.20230419.0, the FormData API implementation was subject to an integer overflow. If a FormData instance contained more than 2^31 elements, the forEach() method could end up reading from the wrong location in memory while…

  18. 7.5CVE-2023-32058EPSS 0.9%

    Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, due to missing overflow check for loop variables, by assigning the iterator of a loop to a variable, it is possible to overflow the type …

  19. 5.5CVE-2023-22443EPSS 0.2%

    Integer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable denial of service via local access.

  20. 7.8CVE-2023-2610EPSS 0.5%

    Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532.

  21. 7.8CVE-2023-24949EPSS 25%

    Windows Kernel Elevation of Privilege Vulnerability

  22. 5.5CVE-2023-24945EPSS 0.6%

    Windows iSCSI Target Service Information Disclosure Vulnerability

  23. 4.4CVE-2022-47489EPSS 0.10%

    In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  24. 7.8CVE-2023-27937EPSS 0.3%

    An integer overflow was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. Parsing a maliciously crafted plist…

  25. 8.6CVE-2022-46720EPSS 0.2%

    An integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. An app may be able to break out of its sandbox

  26. 6.5CVE-2023-27354EPSS 0.6%

    This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. The specific flaw exists within…

  27. 7.8CVE-2021-0885EPSS 0.09%

    In PVRSRVBridgeSyncPrimOpTake of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional exe…

  28. 7.8CVE-2021-0884EPSS 0.09%

    In PVRSRVBridgePhysmemImportSparseDmaBuf of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no add…

  29. 7.8CVE-2021-0883EPSS 0.09%

    In PVRSRVBridgeCacheOpQueue of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execu…

  30. 7.8CVE-2021-0882EPSS 0.09%

    In PVRSRVBridgeRGXKickSync of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execut…

  31. 7.8CVE-2021-0881EPSS 0.09%

    In PVRSRVBridgeRGXKickCDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional executi…

  32. 7.8CVE-2021-0880EPSS 0.09%

    In PVRSRVBridgeRGXKickTA3D of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execut…

  33. 7.8CVE-2021-0879EPSS 0.09%

    In PVRSRVBridgeRGXTDMSubmitTransfer of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no addition…

  34. 7.8CVE-2021-0878EPSS 0.09%

    In PVRSRVBridgeServerSyncGetStatus of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additiona…

  35. 7.8CVE-2021-0876EPSS 0.09%

    In PVRSRVBridgePhysmemNewRamBackedLockedPMR of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no …

  36. 7.8CVE-2021-0875EPSS 0.09%

    In PVRSRVBridgeChangeSparseMem of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional ex…

  37. 7.8CVE-2021-0874EPSS 0.09%

    In PVRSRVBridgeDevicememHistorySparseChange of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no …

  38. 7.8CVE-2021-0873EPSS 0.09%

    In PVRSRVBridgeRGXKickRS of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional executio…

  39. 7.8CVE-2021-0872EPSS 0.09%

    In PVRSRVBridgeRGXKickVRDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execut…

  40. 5.5CVE-2023-1900EPSS 0.3%

    A vulnerability within the Avira network protection feature allowed an attacker with local execution rights to cause an overflow. This could corrupt the data on the heap and lead to a denial-of-service situation. Issue was fixed with Endp…

  41. 7.5CVE-2023-30463EPSS 0.9%

    Altran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because of an integer overflow in pico_ipv6_alloc when processing large ICMPv6 packets. This affects installations with Ethernet support in which a pa…

  42. 9.6CVE-2023-2136KEVEPSS 5.8%

    Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

  43. 9.8CVE-2021-33797EPSS 0.8%

    Buffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. An integer overflow happens when js_strtod() reads in floating point exponent, which leads to a buffer overflow in the pointer *d.

  44. 7.8CVE-2023-27913EPSS 0.2%

    A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to cause an Integer Overflow. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data, or execute arbitrary code in th…

  45. 5.5CVE-2022-48468EPSS 0.4%

    protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.

  46. 7.8CVE-2023-21630EPSS 0.1%

    Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal.

  47. 7.8CVE-2022-40532EPSS 0.1%

    Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.

  48. 7.8CVE-2022-33296EPSS 0.1%

    Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message.

  49. 7.8CVE-2022-33282EPSS 0.1%

    Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback.

  50. 7.8CVE-2022-33269EPSS 0.1%

    Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.