cve.bz

CWE-681: Incorrect Conversion between Numeric Types, page 2

Filter

When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.

What the weakness is: CWE-681 at MITRE. All weaknesses

Ask an AI about CWE-681

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-681: Incorrect Conversion between Numeric Types and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/681.html and https://cve.bz/cve/cwe/681?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2026-27691EPSS 0.2%

    iccDEV provides a set of libraries and tools for working with ICC color management profiles. In versions up to and including 2.3.1.4, signed integer overflow in iccFromCube.cpp during multiplication triggers undefined behavior, potentially…

  2. 7.5CVE-2026-25989EPSS 0.7%

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted SVG file can cause a denial of service. An off-by-one boundary check (`>` instead of `>=`) t…

  3. 7.8CVE-2026-24856EPSS 0.2%

    iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Versions prior to 2.3.1.2 have an undefined behavior issue when floating-point NaN values are conv…

  4. 6.5CVE-2025-71002EPSS 0.3%

    A floating-point exception (FPE) in the flow.column_stack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.

  5. 8.8CVE-2026-21693EPSS 0.4%

    iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in …

  6. 8.8CVE-2026-21688EPSS 0.4%

    iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in …

  7. 7.8CVE-2026-21673EPSS 0.2%

    iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have overflows and underflows in CIccXmlArrayType::ParseTextCountNum(). This vulnerability affects users of the iccDEV l…

  8. 6.3CVE-2025-10543EPSS 0.2%

    In Eclipse Paho Go MQTT v3.1 library (paho.mqtt.golang) versions <=1.5.0 UTF-8 encoded strings, passed into the library, may be incorrectly encoded if their length exceeds 65535 bytes. This may lead to unexpected content in packets sent to…

  9. 7.1CVE-2025-58063EPSS 0.5%

    CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinni…

  10. 8.4CVE-2025-53733EPSS 0.5%

    Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  11. 7.8CVE-2025-24059EPSS 0.5%

    Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

  12. 8.8CVE-2024-49093EPSS 0.9%

    Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

  13. 6.5CVE-2024-7747EPSS 0.5%

    The Wallet for WooCommerce plugin for WordPress is vulnerable to incorrect conversion between numeric types in all versions up to, and including, 1.5.6. This is due to a numerical logic flaw when transferring funds to another user. This ma…

  14. 7.2CVE-2024-38044EPSS 2.1%

    DHCP Server Service Remote Code Execution Vulnerability

  15. 5.3CVE-2024-32481EPSS 0.8%

    Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. Starting in version 0.3.8 and prior to version 0.4.0b1, when looping over a `range` of the form `range(start, start + N)`, if `start` is negative, the execution …

  16. 8.8CVE-2024-26162EPSS 2.0%

    Microsoft ODBC Driver Remote Code Execution Vulnerability

  17. 7.5CVE-2024-1552EPSS 0.7%

    Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.*Note:* This issue only affects 32-bit ARM devices. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird …

  18. 4.4CVE-2023-28063EPSS 0.2%

    Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service.

  19. 7.5CVE-2023-46848EPSS 11%

    Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native input.

  20. 8.8CVE-2023-5184EPSS 0.4%

    Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers.

  21. 7.5CVE-2023-3635EPSS 1.3%

    GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class.

  22. 7.5CVE-2023-20006EPSS 0.9%

    A vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Appliances could allow an unauth…

  23. 7.8CVE-2023-29346EPSS 0.5%

    NTFS Elevation of Privilege Vulnerability

  24. 8.8CVE-2023-24884EPSS 1.6%

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

  25. 7.1CVE-2023-0185EPSS 0.2%

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where sign conversion issuescasting an unsigned primitive to signed may lead to denial of service or information disclosure.

  26. 9.8CVE-2022-43663EPSS 14%

    An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to t…

  27. 7.8CVE-2023-23401EPSS 0.6%

    Windows Media Remote Code Execution Vulnerability

  28. 8.8CVE-2023-23388EPSS 1.6%

    Windows Bluetooth Driver Elevation of Privilege Vulnerability

  29. 7.8CVE-2023-21736EPSS 0.8%

    Microsoft Office Visio Remote Code Execution Vulnerability

  30. 5.5CVE-2022-34680EPSS 0.3%

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an integer truncation can lead to an out-of-bounds read, which may lead to denial of service.

  31. 7.1CVE-2022-34677EPSS 0.3%

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause an integer to be truncated, which may lead to denial of service or data tampering.

  32. 7.8CVE-2022-34670EPSS 0.3%

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors when casting a primitive to a primitive of smaller size causes data to be lost in…

  33. 6.9CVE-2022-40225EPSS 0.6%

    A vulnerability has been identified in SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). Casting an internal value could lead to floating point exception under cert…

  34. 5.5CVE-2022-42324EPSS 0.3%

    Oxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed precision. The Ocaml Xenbus library takes a C uint32_t out of the ring and casts it directly to an Ocaml integer. In 64-bit Ocaml builds this is …

  35. 9.8CVE-2022-40138EPSS 1.2%

    An integer conversion error in Hermes bytecode generation, prior to commit 6aa825e480d48127b480b08d13adf70033237097, could have been used to perform Out-Of-Bounds operations and subsequently execute arbitrary code. Note that this is only e…

  36. 9.1CVE-2022-36025EPSS 1.1%

    Besu is a Java-based Ethereum client. In versions newer than 22.1.3 and prior to 22.7.1, Besu is subject to an Incorrect Conversion between Numeric Types. An error in 32 bit signed and unsigned types in the calculation of available gas in …

  37. 7.8CVE-2022-2639EPSS 0.9%

    An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZ…

  38. 7.5CVE-2022-34169EPSS 82%

    The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java by…

  39. 5.5CVE-2014-125012EPSS 0.7%

    A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is an unknown function of the file libavcodec/dxtroy.c. The manipulation leads to integer coercion error. It is possible to launch the attack remotely…

  40. 7.8CVE-2014-125011EPSS 0.6%

    A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the function decode_frame of the file libavcodec/ansi.c. The manipulation leads to integer coercion error. The attack can be la…

  41. 7.5CVE-2021-27478EPSS 1.1%

    A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may cause a denial-of-service condition.

  42. 7.5CVE-2022-27189EPSS 0.9%

    On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when an Internet Content Adaptation Protocol (ICA…

  43. 5.5CVE-2022-0322EPSS 0.3%

    A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw, an attempt to use more buffer than is allocated triggers…

  44. 7.5CVE-2022-27882EPSS 1.9%

    slaacd in OpenBSD 6.9 and 7.0 before 2022-03-22 has an integer signedness error and resultant heap-based buffer overflow triggerable by a crafted IPv6 router advertisement. NOTE: privilege separation and pledge can prevent exploitation.

  45. 7.5CVE-2021-32996EPSS 1.1%

    The FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to crash. A restart is required.

  46. 6.5CVE-2021-0964EPSS 0.9%

    In C2SoftMP3::process() of C2SoftMp3Dec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed…

  47. 7.5CVE-2021-41272EPSS 1.5%

    Besu is an Ethereum client written in Java. Starting in version 21.10.0, changes in the implementation of the SHL, SHR, and SAR operations resulted in the introduction of a signed type coercion error in values that represent negative value…

  48. 5.5CVE-2021-41202EPSS 0.2%

    TensorFlow is an open source platform for machine learning. In affected versions while calculating the size of the output within the `tf.range` kernel, there is a conditional statement of type `int64 = condition ? int64 : double`. Due to C…

  49. 9.8CVE-2021-36357EPSS 1.2%

    An issue was discovered in OpenPOWER 2.6 firmware. unpack_timestamp() calls le32_to_cpu() for endian conversion of a uint16_t "year" value, resulting in a type mismatch that can truncate a higher integer value to a smaller one, and bypass …

  50. 8.8CVE-2021-21861EPSS 1.6%

    An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. When processing the 'hdlr' FOURCC code, a specially crafted MPEG-4 input can cause an i…