CWE-197 Numeric Truncation Error
baseTruncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.
01
übergeordnete Schwächen
Übergeordnete Klassen, zu denen dies gehört.
02
Schwachstellen (101)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-42475US | critical9.8OT kritisch | KEV | ||
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier an… | ||||
| CVE-2025-6965US | high7.7 | Exploit | ||
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corrupti… | ||||
| CVE-2024-29050US | high7.8 | Exploit | ||
Windows Cryptographic Services Remote Code Execution Vulnerability | ||||
| CVE-2026-96113US | critical9.8 | — | ||
Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2025-1861US | critical9.8 | — | ||
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when parsing HTTP redirect in the response to an HTTP request, there i… | ||||
| CVE-2020-15202US | critical9.0 | — | ||
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `Shard` API in TensorFlow expects the last argument to be a function taking two `int64` (i.e., `long long`)… | ||||
| CVE-2026-108451US | high8.8 | — | ||
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108450US | high8.8 | — | ||
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-102225US | high8.8 | — | ||
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-78512US | high8.8 | — | ||
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-69512US | high8.8 | — | ||
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-68880US | high8.0 | — | ||
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-96995US | high7.8 | — | ||
Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-85796US | high7.8 | — | ||
Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-70177US | high7.8 | — | ||
Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-70123US | high7.8 | — | ||
Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-69822US | high7.8 | — | ||
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-69535US | high7.8 | — | ||
Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2022-34676US | high7.8 | — | ||
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read may lead to denial of service, information disclosure, or… | ||||
| CVE-2022-34670US | high7.8 | — | ||
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors when casting a primiti… | ||||
03
Quelle
Wo diese Definition veröffentlicht ist.
MITREUS
scry
Schwächen wie diese tauchen in realen, ausnutzbaren Angriffsflächen auf. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan