CWE-197: Numeric Truncation Error
Filter
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.
What the weakness is: CWE-197 at MITRE
Ask an AI about CWE-197
Show the prompt
Explain CWE-197: Numeric Truncation Error and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/197.html and https://cve.bz/cve/cwe/197?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 1.7CVE-2026-107479
An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs module impacts the Qt Framework. An application using the affected functionality could crash.
- 7.5CVE-2026-117069EPSS 0.2%
An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service (DoS) via crafted NAS Registration Requests containing a malformed IMEI…
- 4.8CVE-2026-116742EPSS 0.1%
HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf_index_load_hfile() in bgzf.c that allows attackers to corrupt heap memory by supplying a crafted .gzi index entry count. A count of 0xFFFFFFFF truncates…
- 2.0CVE-2026-116012EPSS 0.2%
Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining in marshal.cc that stores 64-bit string lengths in 32-bit variables. Attackers can supply a crafted packed stream, suc…
- 9.9CVE-2026-115889EPSS 0.5%
Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, the Cranelift compiler backend bit-packs SSA value indices in a way that can silently overflow in release builds when compiling a sufficiently large or specially crafted W…
- 9.3CVE-2026-109588EPSS 0.2%
Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V11.3.1 on the Arm Cortex-R82 (Armv8-R AArch64) MPU port might allow, under certain conditions, an unprivileged task on MPU-enable…
- 8.8CVE-2026-108451EPSS 0.6%
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- 8.8CVE-2026-108450EPSS 0.6%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- 7.0CVE-2026-111105EPSS 0.2%
Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Telegram. User interaction is required to exploit this vulnerability…
- 8.7CVE-2026-33795EPSS 0.4%
A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a BGP Prefix-SID route advertisement that is su…
- 7.1CVE-2026-102043EPSS 0.3%
A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to crash the routing process via MPLS-TE fast-reroute signaling.
- 7.8CVE-2026-96995EPSS 0.3%
Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.
- 9.8CVE-2026-96113EPSS 0.9%
Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.
- 7.8CVE-2026-85796EPSS 0.3%
Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-70177EPSS 0.4%
Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-70123EPSS 0.3%
Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
- 8.8CVE-2026-102225EPSS 0.9%
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
- 7.0CVE-2026-100201EPSS 0.3%
Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally.
- 6.3CVE-2026-105768EPSS 0.3%
apko allows users to build and publish OCI container images built from apk packages. From version 0.2.0 to before version 1.4.5, UserEntry.Parse and GroupEntry.Parse in pkg/passwd read the UID and GID fields of /etc/passwd and /etc/group e…
- 7.5CVE-2026-96280EPSS 0.6%
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize (32 bits on 32-bit systems), causing undersized allocations while subsequent operations use the original 64-bit size, le…
- 7.1CVE-2026-101085EPSS 0.3%
Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated non-administrator users to create malformed rules that trigger unrecovered panics in the alert evaluator goroutine. Attackers can submit a cra…
- 5.3CVE-2026-63449EPSS 0.2%
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the SIP parser in rust/src/sip/parser.rs stores request and response body lengths in 16-bit field…
- 7.5CVE-2026-19667EPSS 0.6%
If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in `named` results in a negative cache entry of 0 bytes. When this entry is subsequently read, `named` aborts. This issue…
- 4.6CVE-2026-76151EPSS 0.7%
Out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11.1, allows remote attackers to cause a denial of service (application…
- 9.6CVE-2026-87529EPSS 0.5%
Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
- 8.8CVE-2026-78512EPSS 0.8%
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- 7.8CVE-2026-69822EPSS 0.3%
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-69578EPSS 0.3%
Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-69535EPSS 0.3%
Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
- 8.8CVE-2026-69512EPSS 0.8%
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
- 5.5CVE-2026-68895EPSS 0.4%
Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally.
- 8.0CVE-2026-68880EPSS 0.8%
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
- 6.2CVE-2026-86315EPSS 0.2%
An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition…
- 4.0CVE-2026-80213EPSS 0.3%
An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS label's length into a single octet without checking its range. A label longer than 255 octets had its length stored modulo 256 but the…
- 5.3CVE-2026-77014EPSS 0.2%
A flaw was found in libsoup's SoupServer HTTP Range header processing. The sort_ranges() comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than I…
- 2.4CVE-2026-65610EPSS 0.2%
nnn stores homelen variable as uchar_t, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment can provide an arbitrary HOME path with length that is truncated to 0. The express…
- 8.7CVE-2026-73523EPSS 0.5%
COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-listener.c that allows unauthenticated remote attackers to cause the CAN listener to transmit process stack memory onto the CAN bus by sending a rejected…
- 2.0CVE-2026-49263EPSS 0.2%
Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's WebAssembly backend accepts attacker-controlled raw WASM instruction bytes through the public `cs_disasm()` and `cs_disasm_iter()` APIs. For a large but well-fo…
- 7.8CVE-2026-68804EPSS 0.5%
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- 6.7CVE-2026-65798EPSS 0.3%
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- 6.7CVE-2026-65797EPSS 0.3%
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- 6.7CVE-2026-65795EPSS 0.3%
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-63525EPSS 0.5%
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- 6.7CVE-2026-62883EPSS 0.3%
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- 6.7CVE-2026-62881EPSS 0.3%
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- 6.7CVE-2026-62769EPSS 0.3%
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-62739EPSS 0.3%
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-62698EPSS 0.3%
Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-56650EPSS 0.3%
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally.
- 5.5CVE-2026-55142EPSS 0.6%
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.