An issue was discovered in picoTCP 1.7.0. The routine for processing the next header field (and deducing whether the IPv
An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array
An issue was discovered in the chacha20 crate before 0.2.3 for Rust. A ChaCha20 counter overflow makes it easier for att
The Treck TCP/IP stack before 6.0.1.66 has an Integer Overflow during Memory Allocation that causes an Out-of-Bounds Wri
Integer Overflow or Wraparound vulnerability in the XML RPC library of OpenRobotics ros_comm communications packages all
An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534. An attacker-controlled se
Possible integer overflow can happen in host driver while processing user controlled string due to improper validation o
In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a
Integer overflow in the Drive Execution Environment (DXE) phase in the Capsule Update feature in the UEFI implementation
Multiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update feature in the UEFI impl
A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of s
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-4
There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link wi
An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in li
In the Bluetooth server, there is a possible out of bounds write due to an integer overflow. This could lead to local es
libfreerdp/codec/planar.c in FreeRDP version > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.
libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow.
A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco
An intager overflow vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to denial of service of t
An issue was discovered in LibVNCServer before 0.9.13. libvncserver/scale.c has a pixel_value integer overflow.
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerabil
Integer overflow in media in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap c
Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allo
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which
In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested
Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie.
Integer overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who had compromised the rend
WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an integer overflow in a mallo
A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-us
Data is truncated wrong when its length is greater than 255 bytes.
Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRU
There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at max
There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a sy
APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files
An issue was discovered in OpenEXR before 2.4.1. Because of integer overflows in CompositeDeepScanLine::Data::handleDeep
bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
p_lx_elf.cpp in UPX before 3.96 has an integer overflow during unpacking via crafted values in a PT_DYNAMIC segment.
In load of ResourceTypes.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to loca
ScaleViewPortExtEx in libemf.cpp in libEMF (aka ECMA-234 Metafile Library) 1.0.12 allows an integer overflow and denial
All versions of HoRNDIS are affected by an integer overflow in the RNDIS packet parsing routines. A malicious USB device
HUAWEI P30 Pro smartphone with Versions earlier than 10.1.0.160(C00E160R2P8) has an integer overflow vulnerability. Some
u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM tr
Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of
An issue was discovered in PNGOUT 2020-01-15. When compressing a crafted PNG file, it encounters an integer overflow.
A flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is processed by ImageMagick
Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString(),
In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo()
In decode_Huffman of JBig2_SddProc.cpp, there is a possible out of bounds write due to an integer overflow. This could l
A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because exec_id in
Frequently Asked Questions
What is CWE-190?
CWE-190 (Integer Overflow or Wraparound) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-190?
There are 3,987 CVE records associated with CWE-190 in our database. Of these, 404 are critical severity, 1945 are high severity, and 769 are medium severity.
How can I protect against CWE-190 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-190 using AI-powered security agents.
Detect CWE-190 Vulnerabilities
CyberStrike's AI agents automatically detect integer overflow or wraparound vulnerabilities across your infrastructure.
Get Started