CWE-191 Integer Underflow (Wrap or Wraparound)

cbor2 C extension decoder flaws can cause denial of service

Klever: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)

gix-packetline: reachable panic on empty side-band packet (pre-auth network DoS)

GoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS)

ImageMagick: Heap Buffer Over-Read in IPTC encoder

iskorotkov/avro: Integer Overflow in Decoder

GoBGP has an Integer Underflow Issue

MsQuic has a Remote Elevation of Privilege Vulnerability

nimiq-account: Vesting insufficient funds error can panic

ImageMagick has a heap-Buffer-Overflow write of a single zero byte when parsing xml.

go-git: Maliciously crafted idx file can cause asymmetric memory consumption

ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)

orx-pinned-vec has undefined behavior in index_of_ptr with empty slices

Denial of service in geth

Crash in `max_pool3d` when size argument is 0 or negative

Integer underflow in Frontier

gnark unsoundness in variable comparison / non-unique binary decomposition

Integer underflow in untrusted

Loading a bgzip block can write out of bounds if size overflows.

Missing validation causes denial of service via `Conv3DBackpropFilterV2`