CWE-191: Integer Underflow (Wrap or Wraparound), page 10

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

What the weakness is: CWE-191 at MITRE

1. 7.8CVE-2023-36796EPSS 1.2%2023-09-12

   Visual Studio Remote Code Execution Vulnerability

2. 7.8CVE-2023-36794EPSS 1.2%2023-09-12

   Visual Studio Remote Code Execution Vulnerability

3. 9.1CVE-2023-40181EPSS 1.7%2023-08-31

   FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Integer-Underflow leading to Out-Of-Bound Read in the `zgfx_decompress_segment` function. In the …

4. 7.5CVE-2023-39350EPSS 1.6%2023-08-31

   FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. This issue affects Clients only. Integer underflow leading to DOS (e.g. abort due to `WINPR_ASSERT` with default compilation flags). …

5. 6.5CVE-2023-36909EPSS 2.1%2023-08-08

   Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

6. 8.8CVE-2023-35387EPSS 1.1%2023-08-08

   Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability

7. 8.1CVE-2022-28733EPSS 1.3%2023-07-20

   Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_net_recv_ip4_packets() function on rsm->total_len value. Under certain circumstances the total_len value may end up wrap…

8. 9.8CVE-2023-38427EPSS 1.2%2023-07-18

   An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemble_neg_contexts.

9. 7.8CVE-2023-33158EPSS 0.6%2023-07-11

   Microsoft Excel Remote Code Execution Vulnerability

10. 7.5CVE-2023-35790EPSS 0.8%2023-06-16

    An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop.

11. 7.8CVE-2023-29349EPSS 0.6%2023-06-16

    Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

12. 9.8CVE-2023-32014EPSS 1.9%2023-06-14

    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

13. 7.5CVE-2023-24817EPSS 0.6%2023-05-30

    RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2023.04, an attacker can send a crafted frame to the device resulting in an integer un…

14. 7.5CVE-2023-31137EPSS 1.1%2023-05-09

    MaraDNS is open-source software that implements the Domain Name System (DNS). In version 3.5.0024 and prior, a remotely exploitable integer underflow vulnerability in the DNS packet decompression function allows an attacker to cause a Deni…

15. 7.5CVE-2023-24821EPSS 0.9%2023-04-24

    RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in a large o…

16. 7.5CVE-2023-24820EPSS 0.9%2023-04-24

    RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. An attacker can send a crafted frame to the device resulting in a large out of bounds write beyond …

17. 7.8CVE-2023-21630EPSS 0.1%2023-04-13

    Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal.

18. 7.8CVE-2023-26421EPSS 4.6%2023-04-12

    Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Integer Underflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Expl…

19. 7.8CVE-2023-28293ExploitEPSS 2.9%2023-04-11

    Windows Kernel Elevation of Privilege Vulnerability

20. 7.8CVE-2023-28272EPSS 0.5%2023-04-11

    Windows Kernel Elevation of Privilege Vulnerability

21. 9.8CVE-2023-28250EPSS 2.0%2023-04-11

    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

22. 7.5CVE-2023-28247EPSS 1.6%2023-04-11

    Windows Network File System Information Disclosure Vulnerability

23. 8.8CVE-2023-24887EPSS 1.6%2023-04-11

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

24. 4.3CVE-2023-24911EPSS 1.1%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

25. 8.8CVE-2023-24864EPSS 1.3%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability

26. 9.8CVE-2023-21708EPSS 1.5%2023-03-14

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

27. 4.4CVE-2023-20635EPSS 0.1%2023-03-07

    In keyinstall, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0…

28. 7.8CVE-2023-21815EPSS 0.5%2023-02-14

    Visual Studio Remote Code Execution Vulnerability

29. 7.8CVE-2023-21718EPSS 0.7%2023-02-14

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

30. 8.8CVE-2023-21684EPSS 1.3%2023-02-14

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

31. 5.5CVE-2022-38681EPSS 0.09%2023-02-12

    In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

32. 5.5CVE-2023-0469EPSS 0.3%2023-01-26

    A use-after-free flaw was found in io_uring/filetable.c in io_install_fixed_file in the io_uring subcomponent in the Linux Kernel during call cleanup. This flaw may lead to a denial of service.

33. 8.8CVE-2023-21681EPSS 1.4%2023-01-10

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

34. 8.1CVE-2023-21556EPSS 1.5%2023-01-10

    Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

35. 7.5CVE-2023-21527EPSS 2.0%2023-01-10

    Windows iSCSI Service Denial of Service Vulnerability

36. 9.8CVE-2022-4338EPSS 1.4%2023-01-10

    An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.

37. 5.5CVE-2022-44444EPSS 0.1%2023-01-04

    In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

38. 7.5CVE-2022-20516EPSS 0.8%2022-12-16

    In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not n…

39. 7.5CVE-2022-20483EPSS 0.7%2022-12-13

    In several functions that parse avrc response in avrc_pars_ct.cc and related files, there are possible out of bounds reads due to integer overflows. This could lead to remote information disclosure with no additional execution privileges n…

40. 7.5CVE-2022-37301EPSS 0.8%2022-11-22

    A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part num…

41. 7.8CVE-2022-39343EPSS 0.9%2022-11-08

    Azure RTOS FileX is a FAT-compatible file system that’s fully integrated with Azure RTOS ThreadX. In versions before 6.2.0, the Fault Tolerant feature of Azure RTOS FileX includes integer under and overflows which may be exploited to achie…

42. 6.5CVE-2022-3165EPSS 1.6%2022-10-17

    An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended format. A malicious client could use this flaw to make QEMU unresponsive by sending a specially crafted payload message, re…

43. 9.8CVE-2022-39293EPSS 0.8%2022-10-13

    Azure RTOS USBX is a high-performance USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. The case is, in [_ux_host_class_pima_read](https://github.com/azure-rtos/usbx/blob/master/common/…

44. 9.8CVE-2022-36063EPSS 2.2%2022-10-10

    Azure RTOS USBx is a USB host, device, and on-the-go (OTG) embedded stack, fully integrated with Azure RTOS ThreadX and available for all Azure RTOS ThreadX–supported processors. Azure RTOS USBX implementation of host support for USB CDC E…

45. 7.8CVE-2022-27492EPSS 0.5%2022-09-23

    An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file.

46. 5.5CVE-2022-20393EPSS 0.1%2022-09-13

    In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure from the media server with no additional execution privileges need…

47. 5.5CVE-2022-2869EPSS 0.3%2022-08-17

    libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a u…

48. 5.5CVE-2022-2867EPSS 0.3%2022-08-17

    libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with certain parameters) could cause a…

49. 7.5CVE-2022-2335EPSS 1.6%2022-08-17

    A crafted HTTP packet with a -1 content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22.

50. 6.5CVE-2021-25121EPSS 1.2%2022-06-20

    The Rating by BestWebSoft WordPress plugin before 1.6 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service on the post/page when a user submit such rating