Common Weakness Enumeration

CWE-190 Integer Overflow or Wraparound

Description

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-190 ordered by modification date.

25 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-rxjv-24xq-76wc CVE-2026-102834 HIGH

JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoS

2026-10-16
GHSA-f63g-mx39-3r38 CVE-2026-85363 HIGH

Microsoft Security Advisory CVE-2026-85363 - .NET and Visual Studio Remote Code Execution Vulnerability

2026-10-13
GHSA-c85p-xxjj-2r75 CVE-2026-107217 HIGH

Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows

2026-10-07
GHSA-fw94-4wwp-w8pw CVE-2026-107224 MODERATE

Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader

2026-10-07
GHSA-v4x9-3549-crwv CVE-2026-96749 HIGH

PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding

2026-10-05
GHSA-j497-x9hr-x34x CVE-2026-77408 CRITICAL

RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow

2026-09-17
GHSA-9rm7-3qhh-h2mc CVE-2026-63126 HIGH

Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799)

2026-09-17
GHSA-v56q-mh7h-f735 CVE-2026-59879 HIGH

Immutable.js `List` 32-bit trie overflow → unrecoverable DoS

2026-09-16
GHSA-p6m2-r3w9-mpxw CVE-2026-88015 MODERATE

rclone local: crafted Range request against a translated symlink panics (DoS)

2026-09-10
GHSA-7m6h-x95x-82q5 CVE-2026-73558 MODERATE

vLLM: Cross-User Data Leak Vulnerability

2026-09-08
GHSA-xwg4-73v4-xw9w CVE-2026-73086 HIGH

nanoid: Integer Overflow or Wraparound

2026-09-01
GHSA-mrpp-v6pg-p54x CVE-2026-55764 HIGH

klever-go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply

2026-08-28
GHSA-cgc5-v3f2-8m2v CVE-2026-54755 CRITICAL

Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)

2026-08-28
GHSA-pgrf-4654-3gq8 CVE-2026-61799 MODERATE

netty-incubator-codec-ohttp: Binary HTTP parser unchecked varint length overflow causes decoder crash

2026-08-20
GHSA-8r8v-xf7q-rcpr CVE-2026-71479 CRITICAL

New API: Integer overflow in quota billing yields negative charges (self-crediting)

2026-08-17
GHSA-xhgw-qwwf-pg32 CVE-2026-10722 LOW

ebpf-go is vulnerable to integer overflow via LoadCollectionSpecFromReader

2026-08-17
GHSA-hqf9-8xv5-x8xw CVE-2026-73645 MODERATE

ERC7984ERC20Wrapper: once a wrapper is filled, subsequent wrap requests do not revert and result in loss of funds.

2026-08-13
GHSA-26gq-p25f-99cp CVE-2026-73564 HIGH

frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow

2026-08-13
GHSA-fx4q-gjrx-2jw6 CVE-2026-62897 HIGH

Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability

2026-08-11
GHSA-jqhp-238x-qhgf CVE-2026-62886 HIGH

Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability

2026-08-11
GHSA-pjxj-pchx-4c3m CVE-2026-53466 MODERATE

ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow

2026-07-31
GHSA-775g-4xr8-78h8 CVE-2026-41849 HIGH

Spring Framework Denial of Service via Integer Overflow in SpEL Expressions

2026-07-30
GHSA-h22j-f9xw-xjjm CVE-2026-62946 MODERATE

ImageMagick: Integer Overflow in JNX decoder causes heap buffer over-write when processing extremly large files on 32-bit builds

2026-07-24
GHSA-f5m7-cqgw-8hm7 CVE-2026-62343 MODERATE

ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided

2026-07-24
GHSA-6r8x-57c9-28j4 CVE-2026-59199 HIGH

Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow

2026-07-20