CWE-190 Integer Overflow or Wraparound
baseThe product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
01
übergeordnete Schwächen
Übergeordnete Klassen, zu denen dies gehört.
02
untergeordnete Schwächen
Spezifischere Einträge unterhalb dieses.
03
Schwachstellen (4628)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-48595US | —OT kritisch | KEV | ||
In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution p… | ||||
| CVE-2026-21385US | —OT kritisch | KEV | ||
Memory corruption while using alignments for memory allocation. | ||||
| CVE-2025-24985US | —OT kritisch | KEV | ||
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally. | ||||
| CVE-2024-38080US | —OT kritisch | KEV | ||
Windows Hyper-V Elevation of Privilege Vulnerability | ||||
| CVE-2023-33107US | high7.8OT kritisch | KEV | ||
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. | ||||
| CVE-2023-6345US | critical9.6OT kritisch | KEV | ||
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a m… | ||||
| CVE-2023-32434US | high7.8OT kritisch | KEV | ||
An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, w… | ||||
| CVE-2023-2136US | critical9.6OT kritisch | KEV | ||
Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a c… | ||||
| CVE-2023-21823US | —OT kritisch | KEV | ||
Windows Graphics Component Remote Code Execution Vulnerability | ||||
| CVE-2022-0185US | high8.4OT kritisch | KEV | ||
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters… | ||||
| CVE-2021-30663US | high8.8OT kritisch | KEV | ||
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, Safari 14.1.1, macOS Big Sur 11.3.1. P… | ||||
| CVE-2021-30952US | high7.8OT kritisch | KEV | ||
An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Process… | ||||
| CVE-2021-30883US | high7.8OT kritisch | KEV | ||
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvO… | ||||
| CVE-2021-30860US | high7.8OT kritisch | KEV | ||
An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.… | ||||
| CVE-2020-15999US | critical9.6OT kritisch | KEV | ||
Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||||
| CVE-2018-6065US | high8.8OT kritisch | KEV | ||
Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to pot… | ||||
| CVE-2018-14634US | high7.8OT kritisch | KEV | ||
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use thi… | ||||
| CVE-2016-1010US | high8.8OT kritisch | KEV | ||
Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176,… | ||||
| CVE-2015-8651US | high8.8OT kritisch | KEV | ||
Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adob… | ||||
| CVE-2013-2729US | critical9.8OT kritisch | KEV | ||
Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a dif… | ||||
04
Angriffsmuster (1)
CAPEC-Angriffsmuster, die dies ausnutzen.
05
Quelle
Wo diese Definition veröffentlicht ist.
MITREUS
scry
Schwächen wie diese tauchen in realen, ausnutzbaren Angriffsflächen auf. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan