Common Weakness Enumeration

CWE-681 Incorrect Conversion between Numeric Types

Description

When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-681 ordered by modification date.

25 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-fw94-4wwp-w8pw CVE-2026-107224 MODERATE

Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader

2026-10-07
GHSA-4v58-74mf-rjx3 CVE-2026-77412 HIGH

RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client

2026-09-17
GHSA-pgrf-4654-3gq8 CVE-2026-61799 MODERATE

netty-incubator-codec-ohttp: Binary HTTP parser unchecked varint length overflow causes decoder crash

2026-08-20
GHSA-pjxj-pchx-4c3m CVE-2026-53466 MODERATE

ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow

2026-07-31
GHSA-8qwj-4jxw-m8jw CVE-2026-4602 HIGH

jsrsasign: Negative Exponent Handling Leads to Signature Verification Bypass

2026-07-21
GHSA-5jv2-g5wq-cmr4 CVE-2026-53923 MODERATE

vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving

2026-07-17
GHSA-mc57-h6j3-3hmv CVE-2026-46384 HIGH

iskorotkov/avro: Integer Overflow in Decoder

2026-06-09
GHSA-m9w2-8782-2946 CVE-2026-34945 LOW -

Wasmtime has host data leakage with 64-bit tables and Winch

2026-04-24
GHSA-pm4j-7r4q-ccg8 - LOW -

Soroban: Muxed address<->ScVal conversions may break after a conversion failure

2026-03-07
GHSA-7355-pwx2-pm84 CVE-2026-25989 HIGH

ImageMagick: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder

2026-02-24
GHSA-93mf-426m-g6x9 CVE-2025-58063 HIGH

CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion

2025-09-10
GHSA-xrqm-fpgr-6hhx CVE-2021-41202 MODERATE

Overflow/crash in `tf.range`

2024-11-13
GHSA-g8wg-cjwc-xhhp CVE-2021-37679 HIGH

Heap OOB in nested `tf.map_fn` with `RaggedTensor`s

2024-11-13
GHSA-vmjw-c2vp-p33c CVE-2021-37669 MODERATE

Crash in NMS ops caused by integer conversion to unsigned

2024-11-13
GHSA-gf88-j2mg-cc82 CVE-2021-37661 MODERATE

Crash caused by integer conversion to unsigned

2024-11-13
GHSA-h6jh-7gv5-28vg CVE-2021-37646 MODERATE

Bad alloc in `StringNGrams` caused by integer conversion

2024-11-13
GHSA-9w2p-5mgw-p94c CVE-2021-37645 MODERATE

Integer overflow due to conversion to unsigned

2024-11-13
GHSA-g4h2-gqm3-c9wq CVE-2021-29539 LOW

Segfault in tf.raw_ops.ImmutableConst

2024-10-30
GHSA-844w-j86r-4x2j CVE-2019-16778 LOW

Heap buffer overflow in `UnsortedSegmentSum` in TensorFlow

2024-10-28
GHSA-x7gm-rfgv-w973 CVE-2020-15225 HIGH

Potential DoS with NumberFilter conversion to integer values.

2024-09-16
GHSA-9339-86wc-4qgf CVE-2022-34169 HIGH

Apache Xalan Java XSLT library integer truncation issue when processing malicious XSLT stylesheets

2024-06-24
GHSA-ppx5-q359-pvwj CVE-2024-32481 MODERATE

vyper's range(start, start + N) reverts for negative numbers

2024-04-25
GHSA-w33c-445m-f8w7 CVE-2023-3635 MODERATE

Okio Signed to Unsigned Conversion Error vulnerability

2023-07-13
GHSA-4456-w38r-m53x CVE-2022-36025 CRITICAL

Besu VM vulnerable to gas allocation error in CALL operations

2022-09-23
GHSA-gmpm-xp43-f7g6 CVE-2020-1913 HIGH

Signed to Unsigned Conversion Error in Facebook Hermes

2022-06-24