CWE-190 Integer Overflow or Wraparound
baseThe product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
01
parent weaknesses
Broader classes this is a kind of.
02
child weaknesses
More specific entries beneath this one.
03
vulnerabilities (4628)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-48595US | —OT critical | KEV | ||
In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution p… | ||||
| CVE-2026-21385US | —OT critical | KEV | ||
Memory corruption while using alignments for memory allocation. | ||||
| CVE-2025-24985US | —OT critical | KEV | ||
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally. | ||||
| CVE-2024-38080US | —OT critical | KEV | ||
Windows Hyper-V Elevation of Privilege Vulnerability | ||||
| CVE-2023-33107US | high7.8OT critical | KEV | ||
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. | ||||
| CVE-2023-6345US | critical9.6OT critical | KEV | ||
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a m… | ||||
| CVE-2023-32434US | high7.8OT critical | KEV | ||
An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, w… | ||||
| CVE-2023-2136US | critical9.6OT critical | KEV | ||
Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a c… | ||||
| CVE-2023-21823US | —OT critical | KEV | ||
Windows Graphics Component Remote Code Execution Vulnerability | ||||
| CVE-2022-0185US | high8.4OT critical | KEV | ||
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters… | ||||
| CVE-2021-30663US | high8.8OT critical | KEV | ||
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, Safari 14.1.1, macOS Big Sur 11.3.1. P… | ||||
| CVE-2021-30952US | high7.8OT critical | KEV | ||
An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Process… | ||||
| CVE-2021-30883US | high7.8OT critical | KEV | ||
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvO… | ||||
| CVE-2021-30860US | high7.8OT critical | KEV | ||
An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.… | ||||
| CVE-2020-15999US | critical9.6OT critical | KEV | ||
Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||||
| CVE-2018-6065US | high8.8OT critical | KEV | ||
Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to pot… | ||||
| CVE-2018-14634US | high7.8OT critical | KEV | ||
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use thi… | ||||
| CVE-2016-1010US | high8.8OT critical | KEV | ||
Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176,… | ||||
| CVE-2015-8651US | high8.8OT critical | KEV | ||
Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adob… | ||||
| CVE-2013-2729US | critical9.8OT critical | KEV | ||
Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a dif… | ||||
04
attack patterns (1)
CAPEC attack patterns that exploit this.
05
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan