cve.bz

CWE-197: Numeric Truncation Error, page 2

Filter

Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.

What the weakness is: CWE-197 at MITRE

Ask an AI about CWE-197

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-197: Numeric Truncation Error and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/197.html and https://cve.bz/cve/cwe/197?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2026-50357EPSS 0.3%

    Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.

  2. 7.8CVE-2026-50332EPSS 0.3%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  3. 7.8CVE-2026-49792EPSS 0.3%

    Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.

  4. 8.8CVE-2026-6679EPSS 0.5%

    A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an…

  5. 5.4CVE-2026-6039EPSS 0.2%

    LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken from the file was truncated to a 16-bit value when the point buffer was sized, whil…

  6. 7.8CVE-2026-44823EPSS 0.4%

    Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  7. 7.8CVE-2026-40409EPSS 0.3%

    Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

  8. 7.8CVE-2026-40404EPSS 0.3%

    Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

  9. 8.7CVE-2026-42944EPSS 0.8%

    NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when encoding multiple NSID and/or DNS Cookie EDNS and/or EDNS Padding options in the reply packet. The relevant options ('nsid'…

  10. 6.2CVE-2026-40380EPSS 0.5%

    Heap-based buffer overflow in Volume Manager Extension Driver allows an authorized attacker to execute code with a physical attack.

  11. 5.3CVE-2026-44927EPSS 0.2%

    In uriparser before 1.0.2, there is pointer difference truncation to int in various places.

  12. 5.1CVE-2026-42371EPSS 0.2%

    uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.

  13. 6.3CVE-2026-32240EPSS 0.2%

    Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, when using Transfer-Encoding: chunked, if a chunk's size parsed to a value of 2^64 or larger, it would be truncated to a 64-bit integer. In theory, t…

  14. 6.3CVE-2025-10543EPSS 0.2%

    In Eclipse Paho Go MQTT v3.1 library (paho.mqtt.golang) versions <=1.5.0 UTF-8 encoded strings, passed into the library, may be incorrectly encoded if their length exceeds 65535 bytes. This may lead to unexpected content in packets sent to…

  15. 7.8CVE-2025-53723EPSS 0.5%

    Numeric truncation error in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  16. 7.2CVE-2025-6965ExploitEPSS 73%

    There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

  17. 7.8CVE-2025-49679EPSS 0.4%

    Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally.

  18. 8.8CVE-2024-49018EPSS 1.6%

    SQL Server Native Client Remote Code Execution Vulnerability

  19. 9.8CVE-2024-43639EPSS 8.9%

    Windows KDC Proxy Remote Code Execution Vulnerability

  20. 8.8CVE-2024-43519EPSS 1.5%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  21. 4.3CVE-2024-37337EPSS 1.7%

    Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

  22. 7.8CVE-2024-38125EPSS 5.9%

    Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

  23. 6.4CVE-2024-38086EPSS 0.6%

    Azure Kinect SDK Remote Code Execution Vulnerability

  24. 7.2CVE-2024-38044EPSS 2.1%

    DHCP Server Service Remote Code Execution Vulnerability

  25. 7.5CVE-2024-30029EPSS 1.5%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  26. 7.5CVE-2024-30024EPSS 1.5%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  27. 7.5CVE-2024-30023EPSS 1.5%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  28. 7.5CVE-2024-30022EPSS 1.5%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  29. 7.5CVE-2024-30015EPSS 1.5%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  30. 7.5CVE-2024-30014EPSS 1.5%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  31. 8.8CVE-2024-30009EPSS 1.7%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  32. 8.8CVE-2023-32143EPSS 1.1%

    D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentica…

  33. 7.8CVE-2024-29050EPSS 1.2%

    Windows Cryptographic Services Remote Code Execution Vulnerability

  34. 8.8CVE-2024-28944EPSS 2.4%

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

  35. 8.8CVE-2024-21451EPSS 1.9%

    Microsoft ODBC Driver Remote Code Execution Vulnerability

  36. 8.8CVE-2024-21440EPSS 2.0%

    Microsoft ODBC Driver Remote Code Execution Vulnerability

  37. 7.8CVE-2024-21434EPSS 0.8%

    Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability

  38. 6.8CVE-2024-21429EPSS 0.9%

    Windows USB Hub Driver Remote Code Execution Vulnerability

  39. 8.8CVE-2024-21391EPSS 1.6%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  40. 5.5CVE-2024-21377EPSS 0.6%

    Windows DNS Information Disclosure Vulnerability

  41. 8.8CVE-2024-21352EPSS 1.6%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  42. 7.8CVE-2024-21310EPSS 12%

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

  43. 6.5CVE-2023-36641EPSS 1.4%

    A numeric truncation error vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiProxy 7.2.0 through 7.2.4, Fo…

  44. 7.8CVE-2023-36710EPSS 0.9%

    Windows Media Foundation Core Remote Code Execution Vulnerability

  45. 7.8CVE-2023-35328EPSS 0.4%

    Windows Transaction Manager Elevation of Privilege Vulnerability

  46. 9.8CVE-2022-42475KEVEPSS 99.4%

    A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier…

  47. 5.5CVE-2022-34680EPSS 0.3%

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an integer truncation can lead to an out-of-bounds read, which may lead to denial of service.

  48. 7.8CVE-2022-34676EPSS 0.3%

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read may lead to denial of service, information disclosure, or data tampering.

  49. 7.8CVE-2022-34670EPSS 0.3%

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors when casting a primitive to a primitive of smaller size causes data to be lost in…

  50. 9.0CVE-2020-15202EPSS 1.3%

    In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `Shard` API in TensorFlow expects the last argument to be a function taking two `int64` (i.e., `long long`) arguments. However, there are several places in TensorFlow…