cve.bz

CWE-190: Integer Overflow or Wraparound (Year 2038 problem, Y2K38, Y2038, Epochalypse), page 6

Filter

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

What the weakness is: CWE-190 at MITRE

Ask an AI about CWE-190

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-190: Integer Overflow or Wraparound and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/190.html and https://cve.bz/cve/cwe/190?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2026-90715EPSS 0.6%

    A security vulnerability has been detected in marcobambini Gravity up to 0.9.7. This affects an unknown function of the file src/utils/gravity_json.c of the component udp json-parser. Such manipulation leads to integer overflow. The attack…

  2. 2.9CVE-2023-24288EPSS 0.1%

    An issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial of Service (DoS) via creating an excessive amount of save states.

  3. 6.9CVE-2026-90596EPSS 0.6%

    A weakness has been identified in embedded-graphics up to 0.8.2 on 32-bit. Impacted is the function ImageRaw::new/bytes_per_row of the file src/image/image_raw.rs. This manipulation causes integer overflow. The attack is possible to be car…

  4. 6.9CVE-2026-90593EPSS 0.5%

    A vulnerability was determined in embedded-graphics up to 0.8.2. This affects the function ImageRaw::draw_sub_image of the file src/image/image_raw.rs. Executing a manipulation of the argument width can lead to integer overflow. The attack…

  5. 6.9CVE-2026-90473EPSS 0.4%

    msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue() when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps …

  6. 7.4CVE-2026-54241EPSS 0.4%

    libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate the sample adaptive offset input-buffer size, allowing a crafted HEVC stream with large dimensions and 16…

  7. 7.4CVE-2026-54240EPSS 0.4%

    libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate pixel offsets, allowing a crafted HEVC stream with large image dimensions to trigger an integer overflow …

  8. 7.2CVE-2026-87020EPSS 0.6%

    An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG.

  9. 8.7CVE-2026-89146EPSS 0.6%

    libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow. A malicious rendezvous server can send a discovery response with an unbounded TTL v…

  10. 6.5CVE-2026-89158EPSS 0.2%

    PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.

  11. 7.4CVE-2026-89157EPSS 0.3%

    PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.

  12. 4.4CVE-2026-88914EPSS 0.1%

    A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds check in the …

  13. 8.7CVE-2026-16174EPSS 0.2%

    Netskope was notified about a potential gap in Netskope Endpoint DLP (EPDLP) running on Windows systems. Successful exploitation of the gap could potentially allow a privileged user to send a crafted message to the EPDLP process port to tr…

  14. 5.7CVE-2026-88035EPSS 0.1%

    A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past the end of a small buffer. A party able to set the driver's connection settings …

  15. 8.8CVE-2026-85228EPSS 0.5%

    An integer overflow in the tensor buffer validation component in Amazon Deep Java Library (DJL) from 0.13.0 through 0.36.0 on all platforms might allow a remote unauthenticated actor to obtain information from adjacent process memory or ca…

  16. 5.3CVE-2026-88015EPSS 0.4%

    rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, backend/local with --links or links=true exposes symlink targets as .rclonelink objects, and fs.RangeOption.Deco…

  17. 8.8CVE-2026-87823EPSS 0.4%

    zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size native methods, allowing out-of-bounds memory reads via negative or overflowing offsets. Attackers can supply negative offset values near I…

  18. 7.3CVE-2026-56711EPSS 0.1%

    VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user interaction and may result in application termination or code execution with the privi…

  19. 9.6CVE-2026-87643EPSS 0.5%

    Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

  20. 4.3CVE-2026-87630EPSS 0.3%

    Integer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

  21. 7.8CVE-2026-81987EPSS 0.3%

    Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open…

  22. 7.8CVE-2026-82007EPSS 0.3%

    Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must o…

  23. 7.8CVE-2026-75863EPSS 0.3%

    Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must o…

  24. 7.8CVE-2026-75862EPSS 0.3%

    Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must o…

  25. 7.8CVE-2026-75771EPSS 0.3%

    Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must o…

  26. 7.8CVE-2026-49927EPSS 0.10%

    In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  27. 7.8CVE-2026-49919EPSS 0.10%

    In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed …

  28. 4.3CVE-2026-45527EPSS 0.3%

    In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. …

  29. 7.8CVE-2026-84000EPSS 0.3%

    Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.

  30. 7.8CVE-2026-81959EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  31. 7.8CVE-2026-81949EPSS 0.5%

    Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  32. 7.5CVE-2026-77896EPSS 0.7%

    Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.

  33. 8.8CVE-2026-77486EPSS 0.8%

    Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.

  34. 7.8CVE-2026-73002EPSS 0.3%

    Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  35. 7.8CVE-2026-72995EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  36. 7.8CVE-2026-72990EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  37. 8.8CVE-2026-72986EPSS 0.8%

    Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

  38. 8.8CVE-2026-71336EPSS 0.9%

    Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network.

  39. 7.8CVE-2026-70581EPSS 0.3%

    Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  40. 7.8CVE-2026-70572EPSS 0.3%

    Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  41. 8.8CVE-2026-70351EPSS 0.8%

    Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network.

  42. 8.2CVE-2026-69846EPSS 0.3%

    Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

  43. 8.8CVE-2026-69742EPSS 0.8%

    Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.

  44. 7.8CVE-2026-69738EPSS 0.3%

    Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  45. 6.5CVE-2026-69734EPSS 0.9%

    Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  46. 7.8CVE-2026-69707EPSS 0.3%

    Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

  47. 7.5CVE-2026-69631EPSS 1.2%

    Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network.

  48. 7.8CVE-2026-69608EPSS 0.3%

    Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  49. 7.8CVE-2026-69594EPSS 0.3%

    Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

  50. 9.8CVE-2026-69586EPSS 1.0%

    Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.