CWE-681 Incorrect Conversion between Numeric Types
Description
When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-681 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-fw94-4wwp-w8pw | CVE-2026-107224 | MODERATE |
Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader |
2026-10-07 | |
| GHSA-4v58-74mf-rjx3 | CVE-2026-77412 | HIGH |
RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client |
2026-09-17 | |
| GHSA-pgrf-4654-3gq8 | CVE-2026-61799 | MODERATE |
netty-incubator-codec-ohttp: Binary HTTP parser unchecked varint length overflow causes decoder crash |
2026-08-20 | |
| GHSA-pjxj-pchx-4c3m | CVE-2026-53466 | MODERATE |
nuget/Magick.NET-Q16-AnyCPU
nuget/Magick.NET-Q16-HDRI-AnyCPU
nuget/Magick.NET-Q16-HDRI-OpenMP-arm64
nuget/Magick.NET-Q16-HDRI-arm64
nuget/Magick.NET-Q16-HDRI-x64
nuget/Magick.NET-Q16-HDRI-x86
nuget/Magick.NET-Q16-OpenMP-arm64
nuget/Magick.NET-Q16-OpenMP-x64
nuget/Magick.NET-Q16-arm64
nuget/Magick.NET-Q16-x64
nuget/Magick.NET-Q16-x86
nuget/Magick.NET-Q8-AnyCPU
nuget/Magick.NET-Q8-OpenMP-arm64
nuget/Magick.NET-Q8-OpenMP-x64
nuget/Magick.NET-Q8-arm64
nuget/Magick.NET-Q8-x64
nuget/Magick.NET-Q8-x86
|
ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow |
2026-07-31 |
| GHSA-8qwj-4jxw-m8jw | CVE-2026-4602 | HIGH |
jsrsasign: Negative Exponent Handling Leads to Signature Verification Bypass |
2026-07-21 | |
| GHSA-5jv2-g5wq-cmr4 | CVE-2026-53923 | MODERATE |
vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving |
2026-07-17 | |
| GHSA-mc57-h6j3-3hmv | CVE-2026-46384 | HIGH |
iskorotkov/avro: Integer Overflow in Decoder |
2026-06-09 | |
| GHSA-m9w2-8782-2946 | CVE-2026-34945 | LOW | - |
Wasmtime has host data leakage with 64-bit tables and Winch |
2026-04-24 |
| GHSA-pm4j-7r4q-ccg8 | - | LOW | - |
Soroban: Muxed address<->ScVal conversions may break after a conversion failure |
2026-03-07 |
| GHSA-7355-pwx2-pm84 | CVE-2026-25989 | HIGH |
nuget/Magick.NET-Q16-AnyCPU
nuget/Magick.NET-Q16-HDRI-AnyCPU
nuget/Magick.NET-Q16-HDRI-OpenMP-arm64
nuget/Magick.NET-Q16-HDRI-OpenMP-x64
nuget/Magick.NET-Q16-HDRI-arm64
nuget/Magick.NET-Q16-HDRI-x64
nuget/Magick.NET-Q16-HDRI-x86
nuget/Magick.NET-Q16-OpenMP-arm64
nuget/Magick.NET-Q16-OpenMP-x64
nuget/Magick.NET-Q16-OpenMP-x86
nuget/Magick.NET-Q16-arm64
nuget/Magick.NET-Q16-x64
nuget/Magick.NET-Q16-x86
nuget/Magick.NET-Q8-AnyCPU
nuget/Magick.NET-Q8-OpenMP-arm64
nuget/Magick.NET-Q8-OpenMP-x64
nuget/Magick.NET-Q8-arm64
nuget/Magick.NET-Q8-x64
nuget/Magick.NET-Q8-x86
|
ImageMagick: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder |
2026-02-24 |
| GHSA-93mf-426m-g6x9 | CVE-2025-58063 | HIGH |
CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion |
2025-09-10 | |
| GHSA-xrqm-fpgr-6hhx | CVE-2021-41202 | MODERATE |
Overflow/crash in `tf.range` |
2024-11-13 | |
| GHSA-g8wg-cjwc-xhhp | CVE-2021-37679 | HIGH |
Heap OOB in nested `tf.map_fn` with `RaggedTensor`s |
2024-11-13 | |
| GHSA-vmjw-c2vp-p33c | CVE-2021-37669 | MODERATE |
Crash in NMS ops caused by integer conversion to unsigned |
2024-11-13 | |
| GHSA-gf88-j2mg-cc82 | CVE-2021-37661 | MODERATE |
Crash caused by integer conversion to unsigned |
2024-11-13 | |
| GHSA-h6jh-7gv5-28vg | CVE-2021-37646 | MODERATE |
Bad alloc in `StringNGrams` caused by integer conversion |
2024-11-13 | |
| GHSA-9w2p-5mgw-p94c | CVE-2021-37645 | MODERATE |
Integer overflow due to conversion to unsigned |
2024-11-13 | |
| GHSA-g4h2-gqm3-c9wq | CVE-2021-29539 | LOW |
Segfault in tf.raw_ops.ImmutableConst |
2024-10-30 | |
| GHSA-844w-j86r-4x2j | CVE-2019-16778 | LOW |
Heap buffer overflow in `UnsortedSegmentSum` in TensorFlow |
2024-10-28 | |
| GHSA-x7gm-rfgv-w973 | CVE-2020-15225 | HIGH |
Potential DoS with NumberFilter conversion to integer values. |
2024-09-16 | |
| GHSA-9339-86wc-4qgf | CVE-2022-34169 | HIGH |
Apache Xalan Java XSLT library integer truncation issue when processing malicious XSLT stylesheets |
2024-06-24 | |
| GHSA-ppx5-q359-pvwj | CVE-2024-32481 | MODERATE |
vyper's range(start, start + N) reverts for negative numbers |
2024-04-25 | |
| GHSA-w33c-445m-f8w7 | CVE-2023-3635 | MODERATE |
Okio Signed to Unsigned Conversion Error vulnerability |
2023-07-13 | |
| GHSA-4456-w38r-m53x | CVE-2022-36025 | CRITICAL |
Besu VM vulnerable to gas allocation error in CALL operations |
2022-09-23 | |
| GHSA-gmpm-xp43-f7g6 | CVE-2020-1913 | HIGH |
Signed to Unsigned Conversion Error in Facebook Hermes |
2022-06-24 |