CWE-195 · weakness in Memory Corruption
Signed to Unsigned Conversion Error
30 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- likely to be exploited
- 1
Every one of the 30 is a mark on the map. Named now: 1 to 26, most at risk first.
- An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a b…
- An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000. Calling memcpy() (on ARMv7 targets that utilize the GNU glibc im…
- Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote att…
- illumos osnet-incorporation bcopy() and bzero() implementations make signed instead of unsigned comparisons allowing a system crash.
- Okio GzipSource unhandled exception Denial of Service
- An Integer signedness error in the JavaScript Interpreter in Facebook Hermes prior to commit 2c7af7ec481ceffd0d14ce2d7c045e475fd71dc6 allows attackers to cause a denial of service…
- MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Negative Serialized String Length
- OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpp
- RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration
- Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability
- MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender
- Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing
- Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2
- In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take advantage of this issue to crash an application by sending a vi…
- pupnp: Port truncation via atoi() cast in parse_uri() allows SSRF port confusion
- U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK
- U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply
- drivers/wlan/wlan_mgmt,c in RT-Thread through 5.0.2 has an integer signedness error and resultant buffer overflow.
- Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer
- MobilityDB through 1.3.0 Out-of-bounds Read DoS via WKB Deserialization
- Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder
- Integer signedness error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted TLS certificate t…
- Junos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crash
- Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is used
- Integer Conversion Vulnerability Resulting in an Out of Bounds Read in NI LabVIEW
- Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, le…
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.