Common Weakness Enumeration
CWE-195 Signed to Unsigned Conversion Error
Description
The product uses a signed primitive and performs a cast to an unsigned primitive, which can produce an unexpected value if the value of the signed primitive can not be represented using an unsigned primitive.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-195 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-rm6m-hrcw-jw33 | CVE-2026-77406 | HIGH |
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration |
2026-09-17 | |
| GHSA-q6vj-wxvf-5m8c | CVE-2026-26981 | MODERATE |
OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpp |
2026-04-06 | |
| GHSA-v6x3-9r38-r27q | CVE-2025-67897 | MODERATE | - |
Sequoia PGP has Subtraction Overflow when aes_key_unwrap function is provided ciphertext that is too short |
2025-12-16 |
| GHSA-w33c-445m-f8w7 | CVE-2023-3635 | MODERATE |
Okio Signed to Unsigned Conversion Error vulnerability |
2023-07-13 | |
| GHSA-gmpm-xp43-f7g6 | CVE-2020-1913 | HIGH |
Signed to Unsigned Conversion Error in Facebook Hermes |
2022-06-24 |