CWE-191: Integer Underflow (Wrap or Wraparound), page 9
Filter
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
What the weakness is: CWE-191 at MITRE
Ask an AI about CWE-191
ChatGPTClaudePerplexityGoogle AI Mode
Show the prompt
Explain CWE-191: Integer Underflow (Wrap or Wraparound) and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/191.html and https://cve.bz/cve/cwe/191?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 5.5CVE-2022-48828EPSS 0.6%
In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix ia_size underflow iattr::ia_size is a loff_t, which is a signed 64-bit type. NFSv3 and NFSv4 both define file size as an unsigned 64-bit type. Thus there is a …
- 5.5CVE-2022-48804EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: vt_ioctl: fix array_index_nospec in vt_setactivate array_index_nospec ensures that an out-of-bounds value is set to zero on the transient path. Decreasing the value by o…
- 7.8CVE-2024-38517EPSS 0.4%
Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader.h` when parsing JSON text from a stream. An attacker needs to send the victim a…
- 9.8CVE-2024-38074EPSS 2.2%
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- 7.8CVE-2024-38050EPSS 0.7%
Windows Workstation Service Elevation of Privilege Vulnerability
- 8.0CVE-2024-37986EPSS 1.0%
Secure Boot Security Feature Bypass Vulnerability
- 8.0CVE-2024-37981EPSS 1.1%
Secure Boot Security Feature Bypass Vulnerability
- 8.0CVE-2024-37975EPSS 1.3%
Secure Boot Security Feature Bypass Vulnerability
- 8.0CVE-2024-37974EPSS 1.0%
Secure Boot Security Feature Bypass Vulnerability
- 7.5CVE-2024-21466EPSS 0.2%
Information disclosure while parsing sub-IE length during new IE generation.
- 6.7CVE-2024-6285EPSS 0.2%
Integer Underflow (Wrap or Wraparound) vulnerability in Renesas arm-trusted-firmware. An integer underflow in image range check calculations could lead to bypassing address restrictions and loading of images to unallowed addresses.
- 7.5CVE-2024-30070EPSS 2.3%
DHCP Server Service Denial of Service Vulnerability
- 4.3CVE-2024-5256EPSS 0.4%
Sonos Era 100 SMB2 Message Handling Integer Underflow Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos Era 100 smart speakers. A…
- 7.5CVE-2024-32975EPSS 0.7%
Envoy is a cloud-native, open source edge and service proxy. There is a crash at `QuicheDataReader::PeekVarInt62Length()`. It is caused by integer underflow in the `QuicStreamSequencerBuffer::PeekRegion()` implementation.
- 5.5CVE-2021-47555EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: net: vlan: fix underflow for the real_dev refcnt Inject error before dev_hold(real_dev) in register_vlan_dev(), and execute the following testcase: ip link add dev dumm…
- 5.5CVE-2023-52705EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix underflow in second superblock position calculations Macro NILFS_SB2_OFFSET_BYTES, which computes the position of the second superblock, underflows when the …
- 5.5CVE-2024-35980EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Fix TLBI RANGE operand KVM/arm64 relies on TLBI RANGE feature to flush TLBs when the dirty pages are collected by VMM and the page table entries become write…
- 6.5CVE-2024-30011EPSS 2.6%
Windows Hyper-V Denial of Service Vulnerability
- 5.5CVE-2024-30008EPSS 0.8%
Windows DWM Core Library Information Disclosure Vulnerability
- 8.8CVE-2023-42118EPSS 8.4%
Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. Authentication is not required to exploit this vu…
- 5.5CVE-2022-48665EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: exfat: fix overflow for large capacity partition Using int type for sector index, there will be overflow in a large capacity partition. For example, if storage with sec…
- 5.5CVE-2022-48643EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain() syzbot is reporting underflow of nft_counters_enabled counter at nf_tables_addchain() [1…
- 9.8CVE-2024-32040EPSS 1.9%
FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 and have connections to servers using the `NSC` codec are vulnerable to integer underflow. Versio…
- 7.8CVE-2024-26913EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dcn35 8k30 Underflow/Corruption Issue [why] odm calculation is missing for pipe split policy determination and cause Underflow/Corruption issue. [h…
- 9.4CVE-2024-26828EPSS 0.8%
In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_server_interfaces() In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size …
- 8.8CVE-2024-28945EPSS 2.3%
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- 8.8CVE-2024-28933EPSS 2.4%
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- 8.8CVE-2024-28930EPSS 2.4%
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- 8.8CVE-2024-26244EPSS 2.0%
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- 7.2CVE-2024-26208EPSS 2.3%
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- 6.5CVE-2024-3077EPSS 0.5%
An malicious BLE device can crash BLE victim device by sending malformed gatt packet
- 5.5CVE-2021-46951EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: tpm: efi: Use local variable for calculating final log size When tpm_read_log_efi is called multiple times, which happens when one loads and unloads a TPM2 driver multip…
- 8.8CVE-2024-24474EPSS 1.4%
QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in esp_do_nodma in hw/scsi/esp.c because o…
- 9.8CVE-2024-23313EPSS 1.8%
An integer underflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to an out-of-bounds write which in turn can lead t…
- 9.8CVE-2024-0808EPSS 0.5%
Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chromium security severity: High)
- 7.4CVE-2024-0565EPSS 2.0%
An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial …
- 7.8CVE-2024-21309EPSS 0.8%
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- 7.3CVE-2023-39414EPSS 0.4%
Multiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to memory corruption. A victim would need to open a malicious file to…
- 7.8CVE-2023-39413EPSS 0.4%
Multiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to memory corruption. A victim would need to open a malicious file to…
- 7.5CVE-2023-48298EPSS 0.6%
ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. This vulnerability is an integer underflow resulting in crash due to stack buffer overflow in decompressi…
- 7.5CVE-2023-43628EPSS 1.2%
An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1~dev. A specially crafted network packet can lead to memory corruption. An attacker can send a malicious packet to trigger this vulnerability.
- 7.5CVE-2023-47360EPSS 0.9%
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length.
- 7.8CVE-2023-33059EPSS 0.1%
Memory corruption in Audio while processing the VOC packet data from ADSP.
- 7.8CVE-2023-31102EPSS 54%
Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive.
- 8.8CVE-2023-5753EPSS 1.0%
Potential buffer overflows in the Bluetooth subsystem due to asserts being disabled in /subsys/bluetooth/host/hci_core.c
- 7.5CVE-2023-22308EPSS 0.8%
An integer underflow vulnerability exists in the vpnserver OvsProcessData functionality of SoftEther VPN 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigg…
- 7.8CVE-2023-36785EPSS 0.9%
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- 5.5CVE-2023-44378EPSS 0.2%
gnark is a zk-SNARK library that offers a high-level API to design circuits. Prior to version 0.9.0, for some in-circuit values, it is possible to construct two valid decomposition to bits. In addition to the canonical decomposition of `a`…
- 8.8CVE-2023-32653EPSS 1.1%
An out-of-bounds write vulnerability exists in the dcm_pixel_data_decode functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. A victim would need to open a malicious file to tri…
- 7.5CVE-2023-38162EPSS 11%
DHCP Server Service Denial of Service Vulnerability