cve.bz

CWE-194: Unexpected Sign Extension

Filter

The product performs an operation on a number that causes it to be sign extended when it is transformed into a larger data type.

What the weakness is: CWE-194 at MITRE. All weaknesses

Ask an AI about CWE-194

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-194: Unexpected Sign Extension and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/194.html and https://cve.bz/cve/cwe/194?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 2.3CVE-2026-97402

    In Eclipse Kura versions 3.1.0 to 5.6.2, the iBeacon and Eddystone advertisement decoders wrongly parse the AD-structure length field of an over-the-air BLE advertising payload. Any unauthenticated attacker within BLE radio range can broad…

  2. 5.4CVE-2025-13632EPSS 0.2%

    Inappropriate implementation in DevTools in Google Chrome prior to 143.0.7499.41 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. (Chromium se…

  3. 8.8CVE-2022-32138EPSS 1.2%

    In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite.

  4. 7.8CVE-2021-38434EPSS 1.0%

    FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in an unexpected sign extension. An attacker could leverage this vulnerability to execute ar…

  5. 7.8CVE-2020-13544EPSS 1.6%

    An exploitable sign extension vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to sign-extend a length used to…

  6. 8.1CVE-2018-10887EPSS 2.1%

    A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign extension in git_delta_apply function in delta.c file may lead to an integer overflow which in turn leads to an out of bound read, allowing t…