NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where an attacke
NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an attacker could cause an in
After Effects versions 25.6 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could resul
Bridge versions 15.1.3, 16.0.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could re
DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could resul
Memory corruption while using alignments for memory allocation.
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the
Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally.
llama.cpp is an inference of several LLM models in C/C++. Prior to b8146, the gguf_init_from_file_impl() in gguf.cpp is
GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers
llama.cpp is an inference of several LLM models in C/C++. Prior to b7824, an integer overflow vulnerability in the `ggml
The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the
An integer overflow vulnerability in 'pdf-image.c' in Artifex's MuPDF version 1.27.0 allows an attacker to maliciously c
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the
GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers t
GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers t
GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers t
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix RxGK token loading to check bounds rxrp
In the Linux kernel, the following vulnerability has been resolved: mm: filemap: fix nr_pages calculation overflow in f
Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could
libcaca is a colour ASCII art library. In 0.99.beta20 and earlier, an integer overflow vulnerability in libcaca's canvas
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX all
Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
Media Encoder versions 26.0.2, 25.6.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that c
After Effects versions 26.0, 25.6.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that cou
Integer overflow or wraparound in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges
Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a
In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix integer overflow in run_unpack() volume
A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious
Integer overflow or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges loc
Use after free in Windows SDK allows an authorized attacker to elevate privileges locally.
Heap buffer out-of-bounds write vulnerability due to integer overflow in Avira Antivirus engine when scanning a malforme
In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page ca
In ExecuteGraph command handler of EdgeTPU firmware, there is a possible out of bounds write due to an integer overflow.
In the Linux kernel, the following vulnerability has been resolved: KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
In the Linux kernel, the following vulnerability has been resolved: dm log: fix out-of-bounds write due to region_count
dsp_mmap_single() validated the requested mapping by checking the sum of the user-supplied offset and length against the
The CONS_HISTORY ioctl handler did not adequately validate the requested history size. A large value caused an integer
Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to
On Xtensa SoCs built with CONFIG_XTENSA_MPU and CONFIG_USERSPACE, arch_buffer_validate() in arch/xtensa/core/mpu.c — the
Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elev
Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized attacker to execute code loc
Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally.
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code locally.
Frequently Asked Questions
What is CWE-190?
CWE-190 (Integer Overflow or Wraparound) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-190?
There are 3,987 CVE records associated with CWE-190 in our database. Of these, 404 are critical severity, 1945 are high severity, and 769 are medium severity.
How can I protect against CWE-190 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-190 using AI-powered security agents.
Detect CWE-190 Vulnerabilities
CyberStrike's AI agents automatically detect integer overflow or wraparound vulnerabilities across your infrastructure.
Get Started