Possible integer overflow in RPMB counter due to lack of length check on user provided data in Snapdragon Auto, Snapdrag
In memory management driver, there is a possible out of bounds write due to an integer overflow. This could lead to loca
UnEGG v0.5 and eariler versions have a Integer overflow vulnerability, triggered when the user opens a malformed specifi
In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to an integer overflow. This could lead
A flaw was found in djvulibre-3.5.28 and earlier. An integer overflow in function render() in tools/ddjvu via crafted dj
DaviewIndy v8.98.7.0 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malform
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, l
A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulner
A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulner
In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when ma
GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_f
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catali
An integer overflow was addressed through improved input validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, ma
An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1,
A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function n
An integer overflow was addressed through improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5
In memory management driver, there is a possible memory corruption due to an integer overflow. This could lead to local
prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to tri
Storage Spaces Controller Elevation of Privilege Vulnerability
A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulner
TensorFlow is an open source platform for machine learning. In affected versions an attacker can trigger undefined behav
Integer overflow in the Safestring library maintained by Intel(R) may allow an authenticated user to potentially enable
ARK library allows attackers to execute remote code via the parameter(path value) of Ark_NormalizeAndDupPAthNameW functi
An integer overflow has been found in the the latest version of Issuer. The total issuedCount can be zero if the paramet
Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases
An integer buffer overflow in the Nginx webserver of ExpressVPN Router version 1 allows remote attackers to obtain sensi
An issue was discovered in klibc before 2.0.9. An integer overflow in the cpio command may result in a NULL pointer dere
Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. A
Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. A
Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdra
A flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnail
An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable integer overflow in which a very large
Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. A
Redis is an in-memory database that persists on disk. A vulnerability involving out-of-bounds read and integer overflow
An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and
There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause
There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause
An integer overflow in the transfer function of a smart contract implementation for Lancer Token, an Ethereum ERC20 toke
An integer overflow in the mintToken function of a smart contract implementation for Doftcoin Token, an Ethereum ERC20 t
Tizen RT RTOS version 3.0.GBB is vulnerable to integer wrap-around in functions_calloc and mm_zalloc. This improper memo
An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request
Redis is an open source, in-memory database that persists on disk. In affected versions an integer overflow bug in Redis
Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the ziplist data structure
Redis is an open source, in-memory database that persists on disk. An integer overflow bug affecting all versions of Red
Redis is an open source, in-memory database that persists on disk. The redis-cli command line tool and redis-sentinel se
Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the underlying string libr
Frequently Asked Questions
What is CWE-190?
CWE-190 (Integer Overflow or Wraparound) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-190?
There are 3,987 CVE records associated with CWE-190 in our database. Of these, 404 are critical severity, 1945 are high severity, and 769 are medium severity.
How can I protect against CWE-190 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-190 using AI-powered security agents.
Detect CWE-190 Vulnerabilities
CyberStrike's AI agents automatically detect integer overflow or wraparound vulnerabilities across your infrastructure.
Get Started