CWE-190

Possible integer overflow due to improper fragment datatype while calculating number of fragments in a request message i

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio

Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Co

Memory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile

Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity,

Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when

A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc() function can lea

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc

In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

pipenv is a Python development workflow tool. Starting with version 2018.10.9 and prior to version 2022.1.8, a flaw in p

Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, Sn

In mdp driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of

Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdr

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affe

Improper validation of data length received from DMA buffer can lead to memory corruption. in Snapdragon Auto, Snapdrago

An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds

A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing a

In ion_buffer_kmap_get of ion.c, there is a possible use-after-free due to an integer overflow. This could lead to local

In copy_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead

NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote

In libstagefright, there is a possible out of bounds write due to an integer overflow. This could lead to local escalati

An integer overflow flaw was found in the Linux kernel’s virtio device driver code in the way a user triggers the vhost_

A heap-based buffer overflow vulnerability exists in the readDatHeadVec functionality of AnyCubic Chitubox AnyCubic Plug

An integer overflow vulnerability exists in the fltSaveCMP functionality of Leadtools 22. A specially-crafted BMP file c

An exploitable code execution vulnerability exists in the file format parsing functionality of Graphisoft BIMx Desktop V

There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input ima

In ion, there is a possible use after free due to an integer overflow. This could lead to local escalation of privilege

Integer Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to cause memory corruptio

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' a

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' a

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.

Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV.

Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite w

Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi fi

DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gs

DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bz

DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo

DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse elemen

DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_infla

GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames i

An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. A specially-crafted OLE fi

An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. A specially-crafted OLE fi

In AllocateInternalBuffers of g3aa_buffer_allocator.cc, there is a possible out of bounds write due to an integer overfl

Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2S

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg

In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be changed after the fi

Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc.

In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible integer

In DevmemIntHeapAcquire of TBD, there is a possible arbitrary code execution due to an integer overflow. This could lead

In shared_metadata_init of SharedMetadata.cpp, there is a possible out of bounds write due to an integer overflow. This