CWE-191— Integer Underflow
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.— MITRE CWE catalog
678 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-191page 6 of 14
- CVE-2024-53955HIGHCVSS 7.8EG 7.82024-12-10
Bridge versions 14.1.3, 15.0 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user int…
- CVE-2024-53954HIGHCVSS 7.8EG 7.82024-12-10
Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user …
- CVE-2024-52989HIGHCVSS 7.8EG 7.82024-12-10
Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user …
- CVE-2024-52987HIGHCVSS 7.8EG 7.82024-12-10
Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user …
- CVE-2024-52986HIGHCVSS 7.8EG 7.82024-12-10
Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user …
- CVE-2024-52985HIGHCVSS 7.8EG 7.82024-12-10
Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user …
- CVE-2024-52984HIGHCVSS 7.8EG 7.82024-12-10
Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user …
- CVE-2024-54095HIGHCVSS 7.8EG 7.82024-12-10
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 10). The affected application is vulnerable to integer underflow vulnerability which can be triggered while parsing specially crafted PAR files. This co…
- CVE-2024-11477HIGHCVSS 7.8EG 7.82024-11-22
7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this library is required to expl…
- CVE-2024-53061HIGHCVSS 7.8EG 7.82024-11-19
In the Linux kernel, the following vulnerability has been resolved: media: s5p-jpeg: prevent buffer overflows The current logic allows word to be less than 2. If this happens, there will be buffer overflows, as reported by smatch. Add ex…
- CVE-2024-49514HIGHCVSS 7.8EG 7.82024-11-12
Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi…
- CVE-2024-47425HIGHCVSS 7.8EG 7.82024-10-09
Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi…
- CVE-2024-46759HIGHCVSS 7.8EG 7.82024-09-18
In the Linux kernel, the following vulnerability has been resolved: hwmon: (adc128d818) Fix underflows seen when writing limit attributes DIV_ROUND_CLOSEST() after kstrtol() results in an underflow if a large negative number such as -922…
- CVE-2024-41857HIGHCVSS 7.8EG 7.82024-09-13
Illustrator versions 28.6, 27.9.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use…
- CVE-2024-38517HIGHCVSS 7.8EG 7.82024-07-09
Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader.h` when parsing JSON text from a stream. An attacker needs to send the victim a…
- CVE-2024-38050HIGHCVSS 7.8EG 7.82024-07-09
Windows Workstation Service Elevation of Privilege Vulnerability
- CVE-2024-26913HIGHCVSS 7.8EG 7.82024-04-17
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dcn35 8k30 Underflow/Corruption Issue [why] odm calculation is missing for pipe split policy determination and cause Underflow/Corruption issue. [h…
- CVE-2024-21309HIGHCVSS 7.8EG 7.82024-01-09
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- CVE-2023-33059HIGHCVSS 7.8EG 7.82023-11-07
Memory corruption in Audio while processing the VOC packet data from ADSP.
- CVE-2023-36785HIGHCVSS 7.8EG 7.82023-10-10
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2023-36796HIGHCVSS 7.8EG 7.82023-09-12
Visual Studio Remote Code Execution Vulnerability
- CVE-2023-36794HIGHCVSS 7.8EG 7.82023-09-12
Visual Studio Remote Code Execution Vulnerability
- CVE-2023-33158HIGHCVSS 7.8EG 7.82023-07-11
Microsoft Excel Remote Code Execution Vulnerability
- CVE-2023-29349HIGHCVSS 7.8EG 7.82023-06-16
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
- CVE-2023-26421HIGHCVSS 7.8EG 7.82023-04-12
Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Integer Underflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Expl…
- CVE-2023-28293HIGHCVSS 7.8EG 7.82023-04-11
Windows Kernel Elevation of Privilege Vulnerability
- CVE-2023-28272HIGHCVSS 7.8EG 7.82023-04-11
Windows Kernel Elevation of Privilege Vulnerability
- CVE-2023-21718HIGHCVSS 7.8EG 7.82023-02-14
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2022-27492HIGHCVSS 7.8EG 7.82022-09-23
An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file.
- CVE-2022-22715HIGHCVSS 7.8EG 7.82022-02-09
Named Pipe File System Elevation of Privilege Vulnerability
- CVE-2022-23613HIGHCVSS 7.8EG 7.82022-02-07
xrdp is an open source remote desktop protocol (RDP) server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to e…
- CVE-2021-3472HIGHCVSS 7.8EG 7.82021-04-26
A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity a…
- CVE-2021-27486HIGHCVSS 7.8EG 7.82021-04-12
FATEK Automation WinProladder Versions 3.30 and prior is vulnerable to an integer underflow, which may cause an out-of-bounds write and allow an attacker to execute arbitrary code.
- CVE-2020-16273HIGHCVSS 7.8EG 7.82020-11-12
In Arm software implementing the Armv8-M processors (all versions), the stack selection mechanism could be influenced by a stack-underflow attack in v8-M TrustZone based processors. An attacker can cause a change to the stack pointer used …
- CVE-2020-11208HIGHCVSS 7.8EG 7.82020-11-12
Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, S…
- CVE-2020-14362HIGHCVSS 7.8EG 7.82020-09-15
A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality an…
- CVE-2020-14361HIGHCVSS 7.8EG 7.82020-09-15
A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality an…
- CVE-2020-14346HIGHCVSS 7.8EG 7.82020-09-15
A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to data confi…
- CVE-2020-1400HIGHCVSS 7.8EG 7.82020-07-14
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1401, CVE-2020-1407.
- CVE-2019-14085HIGHCVSS 7.8EG 7.82020-03-05
Possible Integer underflow in WLAN function due to lack of check of data received from user side in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snap…
- CVE-2014-9626HIGHCVSS 7.8EG 7.82020-01-24
Integer underflow in the MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a box size less…
- CVE-2019-2297HIGHCVSS 7.8EG 7.82019-11-21
Buffer overflow can occur while processing non-standard NAN message from user space. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice …
- CVE-2019-5099HIGHCVSS 7.8EG 7.82019-11-06
An exploitable integer underflow vulnerability exists in the CMP-parsing functionality of LEADTOOLS 20. A specially crafted CMP image file can cause an integer underflow, potentially resulting in code execution. An attacker can specially c…
- CVE-2019-13104HIGHCVSS 7.8EG 7.82019-08-06
In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem.
- CVE-2019-14523HIGHCVSS 7.8EG 7.82019-08-02
An issue was discovered in Schism Tracker through 20190722. There is an integer underflow via a large plen in fmt_okt_load_song in the Amiga Oktalyzer parser in fmt/okt.c.
- CVE-2019-13602HIGHCVSS 7.8EG 7.82019-07-14
An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and crash) or possibly have unspecified o…
- CVE-2017-18278HIGHCVSS 7.8EG 7.82019-05-06
An integer underflow may occur due to lack of check when received data length from font_mgr_qsee_request_service is bigger than the minimal value of the segment header, which may result in a buffer overflow, in Snapdragon Automobile, Snapd…
- CVE-2018-15418HIGHCVSS 7.8EG 7.82018-10-05
A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the…
- CVE-2018-3999HIGHCVSS 7.8EG 7.82018-10-01
An exploitable stack-based buffer overflow vulnerability exists in the JPEG parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted image embedded within a document can cause a length to be miscalculated and underflow. This…
- CVE-2018-11301HIGHCVSS 7.8EG 7.82018-09-18
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on buffer length while processing debug log event from firmware can lead to an integer overflow.
Map vulnerabilities like CWE-191 to your infrastructure
EchelonGraph correlates every CVE — across CWE-191 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →