CWE-190 Integer Overflow or Wraparound
Description
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-190 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-rxjv-24xq-76wc | CVE-2026-102834 | HIGH |
JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoS |
2026-10-16 | |
| GHSA-f63g-mx39-3r38 | CVE-2026-85363 | HIGH |
Microsoft Security Advisory CVE-2026-85363 - .NET and Visual Studio Remote Code Execution Vulnerability |
2026-10-13 | |
| GHSA-c85p-xxjj-2r75 | CVE-2026-107217 | HIGH |
Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows |
2026-10-07 | |
| GHSA-fw94-4wwp-w8pw | CVE-2026-107224 | MODERATE |
Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader |
2026-10-07 | |
| GHSA-v4x9-3549-crwv | CVE-2026-96749 | HIGH |
PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding |
2026-10-05 | |
| GHSA-j497-x9hr-x34x | CVE-2026-77408 | CRITICAL |
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow |
2026-09-17 | |
| GHSA-9rm7-3qhh-h2mc | CVE-2026-63126 | HIGH |
Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799) |
2026-09-17 | |
| GHSA-v56q-mh7h-f735 | CVE-2026-59879 | HIGH |
Immutable.js `List` 32-bit trie overflow → unrecoverable DoS |
2026-09-16 | |
| GHSA-p6m2-r3w9-mpxw | CVE-2026-88015 | MODERATE |
rclone local: crafted Range request against a translated symlink panics (DoS) |
2026-09-10 | |
| GHSA-7m6h-x95x-82q5 | CVE-2026-73558 | MODERATE |
vLLM: Cross-User Data Leak Vulnerability |
2026-09-08 | |
| GHSA-xwg4-73v4-xw9w | CVE-2026-73086 | HIGH |
nanoid: Integer Overflow or Wraparound |
2026-09-01 | |
| GHSA-mrpp-v6pg-p54x | CVE-2026-55764 | HIGH |
klever-go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply |
2026-08-28 | |
| GHSA-cgc5-v3f2-8m2v | CVE-2026-54755 | CRITICAL |
Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token) |
2026-08-28 | |
| GHSA-pgrf-4654-3gq8 | CVE-2026-61799 | MODERATE |
netty-incubator-codec-ohttp: Binary HTTP parser unchecked varint length overflow causes decoder crash |
2026-08-20 | |
| GHSA-8r8v-xf7q-rcpr | CVE-2026-71479 | CRITICAL |
New API: Integer overflow in quota billing yields negative charges (self-crediting) |
2026-08-17 | |
| GHSA-xhgw-qwwf-pg32 | CVE-2026-10722 | LOW |
ebpf-go is vulnerable to integer overflow via LoadCollectionSpecFromReader |
2026-08-17 | |
| GHSA-hqf9-8xv5-x8xw | CVE-2026-73645 | MODERATE |
ERC7984ERC20Wrapper: once a wrapper is filled, subsequent wrap requests do not revert and result in loss of funds. |
2026-08-13 | |
| GHSA-26gq-p25f-99cp | CVE-2026-73564 | HIGH |
frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow |
2026-08-13 | |
| GHSA-fx4q-gjrx-2jw6 | CVE-2026-62897 | HIGH |
Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability |
2026-08-11 | |
| GHSA-jqhp-238x-qhgf | CVE-2026-62886 | HIGH |
Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability |
2026-08-11 | |
| GHSA-pjxj-pchx-4c3m | CVE-2026-53466 | MODERATE |
nuget/Magick.NET-Q16-AnyCPU
nuget/Magick.NET-Q16-HDRI-AnyCPU
nuget/Magick.NET-Q16-HDRI-OpenMP-arm64
nuget/Magick.NET-Q16-HDRI-arm64
nuget/Magick.NET-Q16-HDRI-x64
nuget/Magick.NET-Q16-HDRI-x86
nuget/Magick.NET-Q16-OpenMP-arm64
nuget/Magick.NET-Q16-OpenMP-x64
nuget/Magick.NET-Q16-arm64
nuget/Magick.NET-Q16-x64
nuget/Magick.NET-Q16-x86
nuget/Magick.NET-Q8-AnyCPU
nuget/Magick.NET-Q8-OpenMP-arm64
nuget/Magick.NET-Q8-OpenMP-x64
nuget/Magick.NET-Q8-arm64
nuget/Magick.NET-Q8-x64
nuget/Magick.NET-Q8-x86
|
ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow |
2026-07-31 |
| GHSA-775g-4xr8-78h8 | CVE-2026-41849 | HIGH |
Spring Framework Denial of Service via Integer Overflow in SpEL Expressions |
2026-07-30 | |
| GHSA-h22j-f9xw-xjjm | CVE-2026-62946 | MODERATE |
ImageMagick: Integer Overflow in JNX decoder causes heap buffer over-write when processing extremly large files on 32-bit builds |
2026-07-24 | |
| GHSA-f5m7-cqgw-8hm7 | CVE-2026-62343 | MODERATE |
nuget/Magick.NET-Q16-AnyCPU
nuget/Magick.NET-Q16-HDRI-AnyCPU
nuget/Magick.NET-Q16-HDRI-OpenMP-arm64
nuget/Magick.NET-Q16-HDRI-arm64
nuget/Magick.NET-Q16-HDRI-x64
nuget/Magick.NET-Q16-HDRI-x86
nuget/Magick.NET-Q16-OpenMP-arm64
nuget/Magick.NET-Q16-OpenMP-x64
nuget/Magick.NET-Q16-arm64
nuget/Magick.NET-Q16-x64
nuget/Magick.NET-Q16-x86
nuget/Magick.NET-Q8-AnyCPU
nuget/Magick.NET-Q8-OpenMP-arm64
nuget/Magick.NET-Q8-OpenMP-x64
nuget/Magick.NET-Q8-arm64
nuget/Magick.NET-Q8-x64
nuget/Magick.NET-Q8-x86
|
ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided |
2026-07-24 |
| GHSA-6r8x-57c9-28j4 | CVE-2026-59199 | HIGH |
Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow |
2026-07-20 |