LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics)
Memory corruption when calculating oversized partition sizes without proper checks.
Memory corruption while calculating offset from partition start point.
A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1
Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to elevate privileges wi
Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate privileges with a phy
Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to execute code with a p
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an unauthorized attacker to
In dpe, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privile
In dpe, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privi
pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, src/conf.c allocates
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.
Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerab
Integer overflow in buffer size calculation could result in out of bounds memory access when handling large tensors in S
Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy length and
Integer overflow in memory copy size calculation in Samsung Open Source ONE could lead to invalid memory operations with
Integer overflow in tensor copy size calculation in Samsung Open Source ONE could lead to out of bounds access during lo
Integer overflow in constant tensor data size calculation in Samsung Open Source ONE could cause incorrect buffer sizing
Vim is an open source, command line text editor. Prior to version 9.2.0450, a heap buffer overflow exists in read_compou
There is an integer overflow vulnerability resulting in an out-of-bounds write recently discovered in NI LabVIEW. This
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio
A flaw was found in vsftpd. This vulnerability allows a denial of service (DoS) via an integer overflow in the ls comman
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1
Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, a negative Content-Length valu
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, progressive_decompress_tile_up
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the
A flaw was found in FFmpeg. A remote attacker could exploit this vulnerability by providing a specially crafted MPEG-PS/
Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the Clum
An operator allowed to use the REST API can cause the Authoritative server to produce invalid HTTPS or SVCB record data,
FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing
Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's c
Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data v
In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer
In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow
In multiple functions of ubsan_throwing_runtime.cpp, there is a possible UBSan failure due to an integer overflow. This
In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause the system to crash due to an inte
In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow
In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow
Integer overflow in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromis
Integer overflow in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to obtain potentially
Integer overflow in Fonts in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensit
7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in
In RtcpFbPacket::decodeRtcpFbPacket, there is a possible out of bounds read due to an integer overflow. This could lead
xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used.
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 r
ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the mod_sftp module's SCP size-r
rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows
Frequently Asked Questions
What is CWE-190?
CWE-190 (Integer Overflow or Wraparound) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-190?
There are 3,987 CVE records associated with CWE-190 in our database. Of these, 404 are critical severity, 1945 are high severity, and 769 are medium severity.
How can I protect against CWE-190 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-190 using AI-powered security agents.
Detect CWE-190 Vulnerabilities
CyberStrike's AI agents automatically detect integer overflow or wraparound vulnerabilities across your infrastructure.
Get Started