CWE-197 Numeric Truncation Error

base

Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.

01

parent weaknesses

Broader classes this is a kind of.

02

vulnerabilities (101)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2022-42475UScritical9.8OT criticalKEV
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier an…
CVE-2025-6965UShigh7.7Exploit
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corrupti…
CVE-2024-29050UShigh7.8Exploit
Windows Cryptographic Services Remote Code Execution Vulnerability
CVE-2026-96113UScritical9.8—
Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2025-1861UScritical9.8—
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when parsing HTTP redirect in the response to an HTTP request, there i…
CVE-2020-15202UScritical9.0—
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `Shard` API in TensorFlow expects the last argument to be a function taking two `int64` (i.e., `long long`)…
CVE-2026-108451UShigh8.8—
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108450UShigh8.8—
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-102225UShigh8.8—
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
CVE-2026-78512UShigh8.8—
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69512UShigh8.8—
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
CVE-2026-68880UShigh8.0—
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVE-2026-96995UShigh7.8—
Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.
CVE-2026-85796UShigh7.8—
Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70177UShigh7.8—
Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-70123UShigh7.8—
Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVE-2026-69822UShigh7.8—
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-69535UShigh7.8—
Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVE-2022-34676UShigh7.8—
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read may lead to denial of service, information disclosure, or…
CVE-2022-34670UShigh7.8—
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors when casting a primiti…
03

source

Where this definition is published.

scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.

Free scan