CWE-191 Integer Underflow (Wrap or Wraparound)
baseThe product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (720)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-0185US | high8.4OT critical | KEV | ||
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters… | ||||
| CVE-2021-31956US | high9.3OT critical | KEV | ||
Windows NTFS Elevation of Privilege Vulnerability | ||||
| CVE-2014-0497US | critical9.8OT critical | KEV | ||
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote atta… | ||||
| CVE-2019-12255US | critical9.8 | Exploit | ||
Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow. | ||||
| CVE-2017-14496US | high7.5 | Exploit | ||
Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a… | ||||
| CVE-2007-1749US | high9.3 | Exploit | ||
Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in Internet Explorer 5.01, 6, and 7 allows remote attackers to ex… | ||||
| CVE-2020-36228US | high7.5 | — | ||
An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service. | ||||
| CVE-2020-36221US | high7.5 | — | ||
An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c… | ||||
| CVE-2005-0199US | critical9.8 | Exploit | ||
Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service (application crash) and possibly execute a… | ||||
| CVE-2004-0184US | medium5.0 | Exploit | ||
Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payl… | ||||
| CVE-2023-31102US | high7.8 | — | ||
Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive. | ||||
| CVE-2024-11477US | high7.8 | Exploit | ||
7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations… | ||||
| CVE-2007-0063US | high10.0 | — | ||
Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1… | ||||
| CVE-2022-22715US | high7.2 | Exploit | ||
Named Pipe File System Elevation of Privilege Vulnerability | ||||
| CVE-2015-6130US | high9.3 | — | ||
Integer underflow in Uniscribe in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows remote attackers to execute arbitrary code via a crafted font, aka "Windows Integer… | ||||
| CVE-2004-0816US | high7.5 | Exploit | ||
Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (application crash) via a malformed IP packe… | ||||
| CVE-2016-10166US | critical9.8 | — | ||
Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact… | ||||
| CVE-2009-4212US | high10.0 | — | ||
Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 through 1.6.3, and 1.7 before 1.7.1, allow re… | ||||
| CVE-2019-12261US | critical9.8 | — | ||
Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion dur… | ||||
| CVE-2018-20181US | critical9.8 | — | ||
rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function seamless_process() and results in memory corrup… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan