CWE-190: Integer Overflow or Wraparound (Year 2038 problem, Y2K38, Y2038, Epochalypse), page 50

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

What the weakness is: CWE-190 at MITRE

1. 7.8CVE-2019-11484EPSS 0.4%2020-02-08

   Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie.

2. 7.8CVE-2019-14051EPSS 0.2%2020-02-07

   Subsequent additions performed during Module loading while allocating the memory would lead to integer overflow and then to buffer overflow in Snapdragon Industrial IOT in MDM9206, MDM9607

3. 6.5CVE-2020-3120EPSS 1.6%2020-02-05

   A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in…

4. 8.2CVE-2020-6059EPSS 2.6%2020-02-04

   An exploitable out of bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SNMP request can trigger an out of bounds memory read which can result in sensitive information discl…

5. 6.8CVE-2014-4860EPSS 0.5%2020-01-31

   Multiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update feature in the UEFI implementation in EDK2 allow physically proximate attackers to bypass intended access restrictions by providing crafted dat…

6. 6.8CVE-2014-4859EPSS 0.6%2020-01-31

   Integer overflow in the Drive Execution Environment (DXE) phase in the Capsule Update feature in the UEFI implementation in EDK2 allows physically proximate attackers to bypass intended access restrictions via crafted data.

7. 9.8CVE-2013-3493EPSS 1.6%2020-01-27

   XnView 2.03 has an integer overflow vulnerability

8. 9.6CVE-2013-3486EPSS 1.8%2020-01-27

   IrfanView FlashPix Plugin 4.3.4 0 has an Integer Overflow Vulnerability

9. 7.8CVE-2015-1530EPSS 0.4%2020-01-24

   media/libmedia/IAudioPolicyService.cpp in Android before 5.1 allows attackers to execute arbitrary code with media_server privileges or cause a denial of service (integer overflow) via a crafted application that provides an invalid array s…

10. 9.8CVE-2015-4042EPSS 2.3%2020-01-24

    Integer overflow in the keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23 might allow attackers to cause a denial of service (application crash) or possibly have unspecified other impact via long strings.

11. 7.8CVE-2012-5340ExploitEPSS 5.7%2020-01-23

    SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file.

12. 7.5CVE-2019-19414EPSS 1.0%2020-01-21

    There is an integer overflow vulnerability in LDAP server of some Huawei products. Due to insufficient input validation, a remote attacker could exploit this vulnerability by sending malformed packets to the target devices. Successful expl…

13. 7.5CVE-2019-19413EPSS 1.0%2020-01-21

    There is an integer overflow vulnerability in LDAP client of some Huawei products. Due to insufficient input validation, a remote attacker could exploit this vulnerability by sending malformed packets to the target devices. Successful expl…

14. 9.8CVE-2019-14016EPSS 0.9%2020-01-21

    Integer overflow occurs while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & …

15. 7.8CVE-2019-10585EPSS 0.2%2020-01-21

    Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can lead to use after free issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, S…

16. 8.8CVE-2014-4610EPSS 4.5%2020-01-14

    Integer overflow in the get_len function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code…

17. 8.8CVE-2014-4609EPSS 5.7%2020-01-14

    Integer overflow in the get_len function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run.

18. 7.5CVE-2019-19911EPSS 2.2%2020-01-05

    There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results in an OverflowError…

19. 8.8CVE-2020-5310EPSS 2.0%2020-01-03

    libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc.

20. 8.8CVE-2019-20205EPSS 1.0%2020-01-02

    libsixel 1.8.4 has an integer overflow in sixel_frame_resize in frame.c.

21. 9.8CVE-2019-13445EPSS 2.2%2019-12-30

    An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. parseOptions() in tools/rosbag/src/record.cpp has an integer overflow when a crafted split option can be entered on t…

22. 6.5CVE-2019-19930EPSS 1.1%2019-12-23

    In libIEC61850 1.4.0, MmsValue_newOctetString in mms/iso_mms/common/mms_value.c has an integer signedness error that can lead to an attempted excessive memory allocation.

23. 8.8CVE-2019-8601EPSS 4.1%2019-12-18

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing …

24. 7.8CVE-2019-2304EPSS 0.2%2019-12-18

    Integer overflow to buffer overflow due to lack of validation of event arguments received from firmware. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobil…

25. 9.8CVE-2019-2242EPSS 1.1%2019-12-18

    Device memory may get corrupted because of buffer overflow/underflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobi…

26. 9.8CVE-2019-10572EPSS 0.7%2019-12-18

    Improper check in video driver while processing data from video firmware can lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, S…

27. 7.8CVE-2019-10537EPSS 0.2%2019-12-18

    Improper validation of event buffer extracted from FW response can lead to integer overflow, which will allow to pass the length check and eventually will lead to buffer overwrite when event data is copied to context buffer in Snapdragon A…

28. 6.7CVE-2019-14611EPSS 0.3%2019-12-16

    Integer overflow in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access.

29. 7.5CVE-2019-18305EPSS 2.5%2019-12-12

    A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010…

30. 7.5CVE-2019-18304EPSS 2.5%2019-12-12

    A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/t…

31. 7.5CVE-2019-18303EPSS 2.5%2019-12-12

    A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/t…

32. 7.5CVE-2019-18302EPSS 2.5%2019-12-12

    A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/t…

33. 7.5CVE-2019-18301EPSS 2.5%2019-12-12

    A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/t…

34. 7.5CVE-2019-18300EPSS 2.5%2019-12-12

    A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/t…

35. 7.5CVE-2019-18299EPSS 2.5%2019-12-12

    A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/t…

36. 7.5CVE-2019-18298EPSS 2.5%2019-12-12

    A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010…

37. 7.8CVE-2019-10592EPSS 0.2%2019-12-12

    Possible integer overflow while multiplying two integers of 32 bit in QDCM API of get display modes as there is no check on the maximum mode count in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, …

38. 7.8CVE-2019-10530EPSS 0.2%2019-12-12

    Lack of check of data truncation on user supplied data in kernel leads to buffer overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150,…

39. 5.5CVE-2019-19746EPSS 1.2%2019-12-12

    make_arrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type.

40. 9.8CVE-2019-5093EPSS 2.5%2019-12-12

    An exploitable code execution vulnerability exists in the DICOM network response functionality of LEADTOOLS libltdic.so version 20.0.2019.3.15. A specially crafted packet can cause an integer overflow, resulting in heap corruption. An atta…

41. 9.8CVE-2019-5085EPSS 3.4%2019-12-12

    An exploitable code execution vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltdic.so, version 20.0.2019.3.15. A specially crafted packet can cause an integer overflow, resulting in heap corruption. An attac…

42. 8.8CVE-2019-13736EPSS 1.5%2019-12-10

    Integer overflow in PDFium in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

43. 9.8CVE-2019-19638EPSS 1.2%2019-12-08

    An issue was discovered in libsixel 1.8.2. There is a heap-based buffer overflow in the function load_pnm at frompnm.c, due to an integer overflow.

44. 9.8CVE-2019-19637EPSS 1.2%2019-12-08

    An issue was discovered in libsixel 1.8.2. There is an integer overflow in the function sixel_decode_raw_impl at fromsixel.c.

45. 9.8CVE-2019-19636EPSS 1.2%2019-12-08

    An issue was discovered in libsixel 1.8.2. There is an integer overflow in the function sixel_encode_body at tosixel.c.

46. 5.3CVE-2019-1551EPSS 14%2019-12-06

    There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a resul…

47. 7.8CVE-2019-19590EPSS 2.5%2019-12-05

    In radare2 through 4.0, there is an integer overflow for the variable new_token_size in the function r_asm_massemble at libr/asm/asm.c. This integer overflow will result in a Use-After-Free for the buffer tokens, which can be filled with a…

48. 9.8CVE-2019-19307EPSS 42%2019-11-26

    An integer overflow in parse_mqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to achieve remote DoS (infinite loop), or possibly cause an out-of-bounds write, by sending a crafted MQTT protocol packet.

49. 8.8CVE-2011-3631EPSS 2.7%2019-11-26

    Hardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows because of the way string lengths concatenation is done in the calculation of the required memory space to be used. A remote attacker could provide…

50. 6.5CVE-2019-5855EPSS 0.7%2019-11-25

    Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.