u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto,
u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Sn
IrfanView FlashPix Plugin 4.3.4 0 has an Integer Overflow Vulnerability
modules/loaders/loader_ico.c in imlib2 1.6.0 has an integer overflow (with resultant invalid memory allocations and out-
Atmel Advanced Software Framework (ASF) 4 has an Integer Overflow.
u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Sna
In the Zephyr Project MQTT code, improper bounds checking can result in memory corruption and possibly remote code execu
libsixel 1.8.4 has an integer overflow in sixel_frame_resize in frame.c.
libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc.
Integer overflow in the get_len function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.
Integer overflow in the get_len function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before
Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attacker
Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow
Integer overflow in the jas_matrix_create function in JasPer allows context-dependent attackers to have unspecified impa
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leadi
Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by an integer overflow vulnerability
An exploitable code execution vulnerability exists in the TIFF fillinraster function of the igcore19d.dll library of Acc
A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Wind
In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c, there is a possible out of bounds write due to an integer o
An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at l
Out of bounds write in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R670
In NewFixedDoubleArray of factory.cc, there is a possible out of bounds write due to an integer overflow. This could lea
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4.
In libstagefright, there is a possible out of bounds write due to an integer overflow. This could lead to remote code ex
In libass 0.14.0, the `ass_outline_construct`'s call to `outline_stroke` causes a signed integer overflow.
Integer overflow in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to bypass site isolation via
Integer overflow in SwiftShader in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit
Multiple integer overflows were addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A
Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A craft
An exploitable out of bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that ar
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers
A flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer overflows in load_pnm() ca
In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled (nearly) arbitrary
Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can lea
SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corru
media/libmedia/IAudioPolicyService.cpp in Android before 5.1 allows attackers to execute arbitrary code with media_serve
Subsequent additions performed during Module loading while allocating the memory would lead to integer overflow and then
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.251
A large heap overflow could occur in Instagram for Android when attempting to upload an image with specially crafted dim
Possible integer overflow to buffer overflow in WLAN while parsing nonstandard NAN IE messages. in Snapdragon Auto, Snap
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_m
An exploitable code execution vulnerability exists in the way Nitro Pro 13.9.1.155 parses Pattern objects. A specially c
Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Number
An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow if k_as
An integer overflow was addressed through improved input validation. This issue is fixed in macOS Catalina 10.15.5. An a
An integer overflow was addressed through improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, ma
In multiple locations of Parcel.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead
In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to an integer overflow.
Frequently Asked Questions
What is CWE-190?
CWE-190 (Integer Overflow or Wraparound) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-190?
There are 3,987 CVE records associated with CWE-190 in our database. Of these, 404 are critical severity, 1945 are high severity, and 769 are medium severity.
How can I protect against CWE-190 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-190 using AI-powered security agents.
Detect CWE-190 Vulnerabilities
CyberStrike's AI agents automatically detect integer overflow or wraparound vulnerabilities across your infrastructure.
Get Started