cve.bz

CWE-681: Incorrect Conversion between Numeric Types, page 4

Filter

When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.

What the weakness is: CWE-681 at MITRE. All weaknesses

Ask an AI about CWE-681

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-681: Incorrect Conversion between Numeric Types and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/681.html and https://cve.bz/cve/cwe/681?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.8CVE-2016-3074ExploitEPSS 36%

    Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buf…

  2. –CVE-2010-2807EPSS 4.2%

    FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.

  3. 8.8CVE-2009-0231EPSS 37%

    The Embedded OpenType (EOT) Font Engine (T2EMBED.DLL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted na…

  4. 7.8CVE-2008-3282EPSS 11%

    Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote attackers to cause a denial of service (application crash) or po…

  5. –CVE-2008-1721ExploitEPSS 23%

    Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.

  6. 7.8CVE-2007-4268EPSS 0.7%

    Integer signedness error in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted AppleTalk message with a negative value, which satisfies a signed comparison during mbuf…

  7. 7.8CVE-2007-4988EPSS 3.1%

    Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based bu…