Integer overflow in Dawn in Google Chrome on Mac prior to 146.0.7680.153 allowed a remote attacker to leak cross-origin
A flaw was found in GIMP. An integer overflow vulnerability exists when processing ICO image files, specifically in the
A vulnerability was identified in dloebl CGIF up to 0.5.2. This vulnerability affects the function cgif_addframe of the
In sec boot, there is a possible out of bounds write due to an integer overflow. This could lead to local denial of serv
In RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overflow. This could lead to remote
Integer overflow in Extensions API in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user to
An authenticated user with standard read/write privileges can cause the mongod process to terminate due to an out-of-mem
In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attacke
Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed
Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.
OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Corte
A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() functi
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a de
A vulnerability was found in libvips 8.19.0. Impacted is the function vips_extract_area_build of the file libvips/conver
A flaw was found in GIMP's PSP (Paint Shop Pro) file parser. A remote attacker could exploit an integer overflow vulnera
A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opj_pi_initialise_encode in
in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.
NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum siz
A weakness has been identified in janet-lang janet up to 1.41.0. This vulnerability affects the function unmarshal_one_f
A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go
ImageMagick before 7.1.2-22 contains a division by zero vulnerability in binomial kernel processing that allows attacker
A vulnerability was identified in radareorg radare2 up to 6.1.6. This vulnerability affects the function cmd_anal_opcode
A security vulnerability has been detected in radareorg radare2 up to 6.1.6. The affected element is the function r_str_
A security flaw has been discovered in radareorg radare2 up to 6.1.6. This impacts the function r_str_word_get0set of th
A weakness has been identified in radareorg radare2 up to 6.1.6. Affected is the function cmd_print in the library libr/
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, Integer Underflow in update_read_cache
A client might theoretically be able to cause a mismatch between queries sent to a backend and the received responses by
Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the rende
A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archive_write_zip_header function i
Integer Overflow or Wraparound vulnerability in MuntashirAkon AppManager (app/src/main/java/org/apache/commons/compress/
Integer Overflow or Wraparound vulnerability in RawTherapee (rtengine modules). This vulnerability is associated with pr
Integer Overflow or Wraparound vulnerability in swoole swoole-src (thirdparty/hiredis modules). This vulnerability is as
Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an attacker with access to SPI
Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to
A reachable infinite loop via an integer wraparound is present in Silicon Labs' Matter SDK which allows an attacker to t
Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The succe
Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The succe
Integer Overflow or Wraparound vulnerability in artraweditor ART (rtengine modules). This vulnerability is associated
Integer Overflow or Wraparound vulnerability in InsightSoftwareConsortium ITK (Modules/ThirdParty/Expat/src/expat modul
F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applicati
Integer overflow in the UEFI firmware for the Slim Bootloader may allow an escalation of privilege. System software adve
An integer overflow vulnerability in the simdjson document-builder API allows incorrect buffer size calculations in "str
A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside t
LibreOffice can import EMF+ graphics, which may be embedded in documents. A heap buffer overflow existed when importing
Integer Overflow or Wraparound vulnerability in the EtherNet/IP function of Mitsubishi Electric MELSEC iQ-F Series FX5-E
A vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 2.6.0 through 2.15.0. Users are recommended
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, when in
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, Oj.load
diff3 tool from GNU diffutils is vulnerable to a heap‑based buffer overflow due to multiple signed integer overflows in
H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 through 2.3.0 computes the data length to checksum by subtracting the
Frequently Asked Questions
What is CWE-190?
CWE-190 (Integer Overflow or Wraparound) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-190?
There are 3,987 CVE records associated with CWE-190 in our database. Of these, 404 are critical severity, 1945 are high severity, and 769 are medium severity.
How can I protect against CWE-190 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-190 using AI-powered security agents.
Detect CWE-190 Vulnerabilities
CyberStrike's AI agents automatically detect integer overflow or wraparound vulnerabilities across your infrastructure.
Get Started