CWE-191: Integer Underflow (Wrap or Wraparound), page 8

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

What the weakness is: CWE-191 at MITRE

1. 5.5CVE-2022-49280EPSS 0.7%2025-02-26

   In the Linux kernel, the following vulnerability has been resolved: NFSD: prevent underflow in nfssvc_decode_writeargs() Smatch complains: fs/nfsd/nfsxdr.c:341 nfssvc_decode_writeargs() warn: no lower bound on 'args->len' Change the …

2. 7.1CVE-2022-49278EPSS 0.3%2025-02-26

   In the Linux kernel, the following vulnerability has been resolved: remoteproc: Fix count check in rproc_coredump_write() Check count for 0, to avoid a potential underflow. Make the check the same as the one in rproc_recovery_write().

3. 5.5CVE-2022-49208EPSS 0.3%2025-02-26

   In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent some integer underflows My static checker complains that: drivers/infiniband/hw/irdma/ctrl.c:3605 irdma_sc_ceq_init() warn: can subtract und…

4. 5.5CVE-2022-49199EPSS 0.3%2025-02-26

   In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit() This code checks "index" for an upper bound but it does not check for negatives. Change the type …

5. 5.3CVE-2025-0728EPSS 0.8%2025-02-21

   In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause an integer underflow and a subsequent denial of service by writing a very large file, by specially crafted packets with Content-Le…

6. 5.3CVE-2025-0727EPSS 0.8%2025-02-21

   In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause an integer underflow and a subsequent denial of service by writing a very large file, by specially crafted packets with Content-Le…

7. 8.1CVE-2025-21376EPSS 9.3%2025-02-11

   Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

8. 7.8CVE-2025-21160EPSS 0.4%2025-02-11

   Illustrator versions 29.1, 28.7.3 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use…

9. 7.8CVE-2025-21156EPSS 0.3%2025-02-11

   InCopy versions 20.0, 19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user int…

10. 7.8CVE-2025-21158EPSS 0.3%2025-02-11

    InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue req…

11. 7.8CVE-2025-21135EPSS 0.3%2025-01-14

    Animate versions 24.0.6, 23.0.9 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user …

12. 7.8CVE-2025-21134EPSS 0.3%2025-01-14

    Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires us…

13. 7.8CVE-2025-21133EPSS 0.3%2025-01-14

    Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires us…

14. 7.8CVE-2025-21122EPSS 0.3%2025-01-14

    Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue require…

15. 7.5CVE-2025-21276EPSS 2.5%2025-01-14

    Windows MapUrlToZone Denial of Service Vulnerability

16. 5.5CVE-2024-57843EPSS 0.4%2025-01-11

    In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix overflow inside virtnet_rq_alloc When the frag just got a page, then may lead to regression on VM. Specially if the sysctl net.core.high_order_alloc_disa…

17. 5.5CVE-2024-57823EPSS 0.3%2025-01-10

    In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in raptor_uri_normalize_path().

18. 7.5CVE-2024-55627EPSS 1.0%2025-01-06

    Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a specially crafted TCP stream can lead to a very large buffer overflow while being zero-filled during in…

19. 7.5CVE-2024-56375EPSS 0.5%2024-12-22

    An integer underflow was discovered in Fort 1.6.3 and 1.6.4 before 1.6.5. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a Manifest RPKI object containing an empty fileList. Fort deref…

20. 4.3CVE-2024-49103EPSS 1.0%2024-12-12

    Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

21. 6.8CVE-2024-49077EPSS 0.9%2024-12-12

    Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

22. 8.6CVE-2024-47606EPSS 1.7%2024-12-12

    GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_theora_extension within qtdemux.c. The vulnerability occurs due to an underflow of the gint s…

23. 6.9CVE-2024-47546EPSS 1.1%2024-12-12

    GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extract_cc_from_data function within qtdemux.c. In the FOURCC_c708 case, the subtraction atom_length - 8 may result in a…

24. 6.9CVE-2024-47545EPSS 1.1%2024-12-12

    GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in qtdemux_parse_trak function within qtdemux.c. During the strf parsing case, the subtraction size -= 40 can lead to a neg…

25. 8.8CVE-2024-11950EPSS 0.5%2024-12-12

    XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of XnSoft XnView Classic. User interaction is requ…

26. 7.8CVE-2024-53955EPSS 0.5%2024-12-10

    Bridge versions 14.1.3, 15.0 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user int…

27. 7.8CVE-2024-53954EPSS 0.4%2024-12-10

    Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user …

28. 7.8CVE-2024-52989EPSS 0.4%2024-12-10

    Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user …

29. 7.8CVE-2024-52987EPSS 0.4%2024-12-10

    Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user …

30. 7.8CVE-2024-52986EPSS 0.4%2024-12-10

    Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user …

31. 7.8CVE-2024-52985EPSS 0.4%2024-12-10

    Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user …

32. 7.8CVE-2024-52984EPSS 0.4%2024-12-10

    Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user …

33. 7.3CVE-2024-54095EPSS 0.2%2024-12-10

    A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 10). The affected application is vulnerable to integer underflow vulnerability which can be triggered while parsing specially crafted PAR files. This co…

34. 6.9CVE-2024-52558EPSS 0.6%2024-12-06

    The affected product is vulnerable to an integer underflow. An unauthenticated attacker could send a malformed HTTP request, which could allow the attacker to crash the program.

35. 9.8CVE-2018-9388EPSS 0.2%2024-12-05

    In store_upgrade and store_cmd of drivers/input/touchscreen/stm/ftm4_pdc.c, there are out of bound writes due to missing bounds checks or integer underflows. These could lead to escalation of privilege.

36. 7.8CVE-2018-5852EPSS 0.1%2024-11-26

    An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'

37. 7.8CVE-2024-11477EPSS 22%2024-11-22

    7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this library is required to expl…

38. 5.5CVE-2024-53081EPSS 0.2%2024-11-19

    In the Linux kernel, the following vulnerability has been resolved: media: ar0521: don't overflow when checking PLL values The PLL checks are comparing 64 bit integers with 32 bit ones, as reported by Coverity. Depending on the values of…

39. 7.8CVE-2024-53061EPSS 0.3%2024-11-19

    In the Linux kernel, the following vulnerability has been resolved: media: s5p-jpeg: prevent buffer overflows The current logic allows word to be less than 2. If this happens, there will be buffer overflows, as reported by smatch. Add ex…

40. 5.5CVE-2024-50290EPSS 0.3%2024-11-19

    In the Linux kernel, the following vulnerability has been resolved: media: cx24116: prevent overflows on SNR calculus as reported by Coverity, if reading SNR registers fail, a negative number will be returned, causing an underflow when r…

41. 7.8CVE-2024-49514EPSS 0.3%2024-11-12

    Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi…

42. 5.5CVE-2024-50258EPSS 0.2%2024-11-09

    In the Linux kernel, the following vulnerability has been resolved: net: fix crash when config small gso_max_size/gso_ipv4_max_size Config a small gso_max_size/gso_ipv4_max_size will lead to an underflow in sk_dst_gso_max_size(), which m…

43. 6.5CVE-2024-20474EPSS 0.6%2024-10-23

    A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of Cisco Secure Client. This vulnerability is due t…

44. 7.8CVE-2024-47425EPSS 0.3%2024-10-09

    Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi…

45. 7.8CVE-2024-46759EPSS 0.3%2024-09-18

    In the Linux kernel, the following vulnerability has been resolved: hwmon: (adc128d818) Fix underflows seen when writing limit attributes DIV_ROUND_CLOSEST() after kstrtol() results in an underflow if a large negative number such as -922…

46. 5.5CVE-2024-46730EPSS 0.2%2024-09-18

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Ensure array index tg_inst won't be -1 [WHY & HOW] tg_inst will be a negative if timing_generator_count equals 0, which should be checked before used. …

47. 6.5CVE-2024-6258EPSS 0.4%2024-09-13

    BT: Missing length checks of net_buf in rfcomm_handle_data

48. 7.8CVE-2024-41857EPSS 0.4%2024-09-13

    Illustrator versions 28.6, 27.9.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use…

49. 5.5CVE-2024-43867EPSS 0.2%2024-08-21

    In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: prime: fix refcount underflow Calling nouveau_bo_ref() on a nouveau_bo without initializing it (and hence the backing ttm_bo) leads to a refcount underflow.…

50. 9.8CVE-2024-38063EPSS 71%2024-08-13

    Windows TCP/IP Remote Code Execution Vulnerability