A specific flaw exists within the Bluetooth stack of the MIB3 infotainment. The issue results from the lack of proper va
Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Ligh
A vulnerability was found in libzvbi up to 0.2.43. It has been declared as problematic. Affected by this vulnerability i
FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library. The in
A integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0 through 7.0.14 may all
A vulnerability was found in coldfunction qCUDA up to db0085400c2f2011eed46fbc04fdc0873141688e. It has been rated as pro
Intelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow. The websReadEvent function incorrectly use
An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below, v
WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. In WAMR versions prior to 2.4.2
pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overfl
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12
A security vulnerability has been detected in Mupen64Plus up to 2.6.0. The affected element is the function write_is_vie
NVIDIA Triton Inference Server contains a vulnerability in the model loading API, where a user could cause an integer ov
containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.
In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+si
In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes,
The transpose crate before 0.2.3 for Rust allows an integer overflow via input_width and input_height arguments.
A vulnerability was found in libzvbi up to 0.2.43. It has been rated as problematic. Affected by this issue is the funct
jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when assigning va
A low privileged attacker can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit tim
In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer overflow that leads to a h
A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loo
Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious users
FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c.
A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash whe
A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be trigge
An integer overflow in the SMU could allow a privileged attacker to potentially write memory beyond the end of the reser
in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through i
in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through i
A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp
A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software.
A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, co
The cosmwasm-std crate before 2.0.2 for Rust allows integer overflows that cause incorrect contract calculations.
An Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2.10 and below; FortiSAS
EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A succe
An issue was discovered on Mercedes Benz NTG 6. A possible integer overflow exists in the user data import/export functi
A vulnerability was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. It has been declared as problematic. Thi
An integer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to
Malwarebytes 1.0.14 for Linux doesn't properly compute signatures in some scenarios. This allows a bypass of detection.
In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the en
Failure to validate the address and size in TEE (Trusted Execution Environment) may allow a malicious x86 attacker to se
Integer overflow or wraparound in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17
An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resultin
Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript functio
z2d is a pure Zig 2D graphics library. Versions of z2d after `0.5.1` and up to and including `0.6.0`, when writing from
Integer Overflow or Wraparound vulnerability in dragonflydb dragonfly (src/redis/lua/struct modules). This vulnerability
An integer overflow exists in the FTS5 https://sqlite.org/fts5.html extension. It occurs when the size of an array of
KissFFT versions prior to the fix commit 1b083165 contain an integer overflow in kiss_fft_alloc() in kiss_fft.c on platf
CommonMarker versions prior to 0.23.4 are at risk of an integer overflow vulnerability. This vulnerability can result in
Frequently Asked Questions
What is CWE-190?
CWE-190 (Integer Overflow or Wraparound) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-190?
There are 3,987 CVE records associated with CWE-190 in our database. Of these, 404 are critical severity, 1945 are high severity, and 769 are medium severity.
How can I protect against CWE-190 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-190 using AI-powered security agents.
Detect CWE-190 Vulnerabilities
CyberStrike's AI agents automatically detect integer overflow or wraparound vulnerabilities across your infrastructure.
Get Started