IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to force a NetServer server thread exception, caused
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions prior to 2.3.2.1 h
iccDEV provides a set of libraries and tools for working with ICC color management profiles. In versions up to and inclu
An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonom
Grid is a data structure grid for rust. From version 0.17.0 to before version 1.0.1, an integer overflow in Grid::expand
jq is a command-line JSON processor. In 1.8.1 and earlier, when decNumberFromString is given a number literal of INT_MAX
CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Integer Overflow or Wraparo
CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Integer Overflow or Wraparo
In Arm ArmNN through 2026-03-27, an integer overflow in TensorShape::GetNumElements() in armnn/Tensor.cpp allows a craft
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an applicati
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an applicati
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an applicati
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an applicati
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in
Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect memory ini
CImg Library is a C++ library for image processing. Prior to commit 4ca26bc, there is an integer overflow vulnerability
Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Integer Attacks. This issue affects
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in
libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code i
libheif is a HEIF and AVIF file format decoder and encoder. The fix for CVE-2026-3949 (commit `b97c8b5`, PR #1712) intro
cgltf through 1.15 contains an integer overflow vulnerability in the non-sparse accessor bounds check within cgltf_valid
Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ).
In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when un
libp2p-rust is the official rust language Implementation of the libp2p networking stack. Prior to version 0.49.4, the Ru
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.
GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string
Apache Traffic Server mishandles integers while decoding HPACK/XPACK headers, corrupting memory. This issue affects Apa
In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a
Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersiz
DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead
The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks potentially
DNG SDK versions 1.7.1 2471 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead
Integer Overflow or Wraparound vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagic
osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.13, an integer underflow vulner
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_mass_storage: Fix potential integer
A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS image loader by
In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Harden depth calculation functions An
Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amo
jq is a command-line JSON processor. In 1.8.1 and earlier, the jq bytecode VM's data stack tracks its allocation size in
NetBSD prior to commit ec8451e contains a signed integer overflow vulnerability in the cryptodev_op() function in sys/op
In the Linux kernel, the following vulnerability has been resolved: lib/crypto: mpi: Fix integer underflow in mpi_read_
In the Linux kernel, the following vulnerability has been resolved: slub: fix data loss and overflow in krealloc() Com
In the Linux kernel, the following vulnerability has been resolved: dm mirror: fix integer overflow in create_dirty_log
In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer
In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer Overflow or Wraparound vulnera
An Out-of-Memory in the mp4_mux_cenc_insert_pssh function (filters/mux_isom.c) of GPAC MP4Box v2.4 allows attackers to c
An integer overflow vulnerability was found in the virtio-snd device via PCM_INFO requests from the guest. A malicious g
Frequently Asked Questions
What is CWE-190?
CWE-190 (Integer Overflow or Wraparound) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-190?
There are 3,987 CVE records associated with CWE-190 in our database. Of these, 404 are critical severity, 1945 are high severity, and 769 are medium severity.
How can I protect against CWE-190 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-190 using AI-powered security agents.
Detect CWE-190 Vulnerabilities
CyberStrike's AI agents automatically detect integer overflow or wraparound vulnerabilities across your infrastructure.
Get Started