WasmEdge is a WebAssembly runtime. Prior to version 0.16.0-alpha.3, a multiplication in `WasmEdge/include/runtime/instan
Integer overflow vulnerability during glTF model loading in the 3D engine module Impact: Successful exploitation of this
Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter module
A vulnerability classified as critical has been found in libzvbi up to 0.2.43. This affects the function vbi_capture_sim
A vulnerability classified as critical was found in libzvbi up to 0.2.43. This vulnerability affects the function vbi_se
Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss
A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximu
A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer
Integer overflow or wraparound in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17
A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCom
Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, p
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix overflow in __rb_map_vma An overf
An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a cra
An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem wi
An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 var
Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk
In barebox before 2025.01.0, request2size in common/dlmalloc.c has an integer overflow, a related issue to CVE-2024-5725
In barebox before 2025.01.0, ext4fs_read_symlink has an integer overflow for zalloc (adding one to an le32 variable) via
In the Linux kernel, the following vulnerability has been resolved: ima: Fix a potential integer overflow in ima_apprai
In the Linux kernel, the following vulnerability has been resolved: net: fix geneve_opt length integer overflow struct
In the Linux kernel, the following vulnerability has been resolved: crypto: cavium - prevent integer overflow loading f
A vulnerability was identified in the handling of Bluetooth Low Energy (BLE) fixed channels (such as SMP or ATT). Specif
The TLS4B ATG system is vulnerable to improper handling of Unix time values that exceed the 2038 epoch rollover. When th
RedisTimeSeries is a time-series database (TSDB) module for Redis, by Redis. Executing one of these commands TS.QUERYIND
RediSearch is a Redis module that provides querying, secondary indexing, and full-text search for Redis. An authenticate
In the Linux kernel, the following vulnerability has been resolved: crypto: ecdsa - Harden against integer overflows in
Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user
Vulnerability of insufficient data length verification in the partition module. Impact: Successful exploitation of this
In lwis_test_register_io of lwis_device_test.c, there is a possible OOB Write due to an integer overflow. This could lea
In da, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosur
in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through i
Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.1, contains an integer overflow or wraparound vulnerability. An u
A low privileged user can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time li
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadO
ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafte
A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client
ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data co
A flaw was found in the SFTP server message decoding logic of libssh. The issue occurs due to an incorrect packet length
Russh is a Rust SSH client & server library. In versions 0.54.0 and below, the channel window adjust message of the SSH
Integer overflow or wraparound in Windows Distributed Transaction Coordinator allows an authorized attacker to disclose
Tinyproxy through 1.11.2 contains an integer overflow vulnerability in the strip_return_port() function within src/reqs.
An integer overflow in the psdParser::ReadImageData function of FreeImage v3.18.0 and before allows attackers to cause a
A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer ov
An integer overflow condition exists in Bluetooth Host stack, within the bt_br_acl_recv routine a critical path for proc
The HTTPS server on Tapo C200 V3 does not properly validate the Content-Length header, which can lead to an integer over
In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1,
libheif is an HEIF and AVIF file format decoder and encoder. Prior to version 1.21.0, a crafted HEIF that exercises the
A vulnerability was found in Nothings stb up to f056911. It has been rated as critical. Affected by this issue is the fu
EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A succe
Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user
Frequently Asked Questions
What is CWE-190?
CWE-190 (Integer Overflow or Wraparound) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-190?
There are 3,987 CVE records associated with CWE-190 in our database. Of these, 404 are critical severity, 1945 are high severity, and 769 are medium severity.
How can I protect against CWE-190 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-190 using AI-powered security agents.
Detect CWE-190 Vulnerabilities
CyberStrike's AI agents automatically detect integer overflow or wraparound vulnerabilities across your infrastructure.
Get Started