Skip to content

CWE-196 · weakness in Memory Corruption

Unsigned to Signed Conversion Error

9 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

  1. An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted documen…CVE-2020-13545Softmaker · CVSS 8.8 · 1.6% likely
  2. Incorrect Conversion between Numeric Types in Besu Ethereum ClientCVE-2022-36025hyperledger · CVSS 9.1 · 1.1% likely

    Hyperledger

  3. Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signedCVE-2026-14454TONYC · CVSS 9.8 · 0.7% likely

    TONYC

  4. Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_readCVE-2026-93019CVSS 9.1 · 0.7% likely
  5. ImageMagick: Infinite Loop in PSD decoder on 32-bit buildsCVE-2026-106567ImageMagick · CVSS 5.9 · 0.4% likely

    ImageMagick

  6. Unsigned to Signed Conversion Error (CWE-196) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project. When Tera Term attempts to establish an SSH connecti…CVE-2026-58317TeraTerm Project · CVSS 5.1 · 0.3% likely
  7. libaec through 1.1.7 Out-of-Bounds Read via m_se_decode() Second Extension DecoderCVE-2026-120457Deutsches Klimarechenzentrum · CVSS 5.3 · 0.2% likely
  8. NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where sign conversion issuescasting an unsigned primitive to signed may lead to denial of se…CVE-2023-0185NVIDIA · CVSS 6.7 · 0.2% likely

    NVIDIA

  9. RAUC: Improper Signing of Plain Bundles Exceeding 2 GiBCVE-2026-34155rauc · CVSS 7.2 · 0.1% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in