Skip to content
BackEsc
Sign in

CWE-681 · weakness in Memory Corruption

Incorrect Conversion between Numeric Types

107 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

likely to be exploited
8

Every one of the 107 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheetsCVE-2022-34169Apache Software Foundation · CVSS 7.5 · 82% likely

    Apache

  2. The Embedded OpenType (EOT) Font Engine (T2EMBED.DLL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows…CVE-2009-023137% likely
  3. Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via…CVE-2016-307436% likely
  4. Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers i…CVE-2008-172123% likely
  5. The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a d…CVE-2017-730818% likely
  6. gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error…CVE-2018-571113% likely
  7. Squid: denial of service in ftpCVE-2023-46848Red Hat · CVSS 8.6 · 11% likely

    Red Hat

  8. Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote atta…CVE-2008-3282CVSS 7.8 · 11% likely
  9. lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly hav…CVE-2019-193174.7% likely
  10. Nagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small negative number as a large positive number during a bzero call.CVE-2020-65824.4% likely
  11. FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service (application crash) or possibly execute…CVE-2010-28074.2% likely
  12. An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length w…CVE-2021-272184.1% likely
  13. An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64…CVE-2021-272193.1% likely
  14. Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image…CVE-2007-49883.1% likely
  15. The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SIGNATURE file to be treated as the signed portion via unspec…CVE-2015-34062.3% likely
  16. Microsoft ODBC Driver Remote Code Execution VulnerabilityCVE-2024-26162Microsoft · CVSS 8.8 · 2.0% likely

    Microsoft

  17. An issue was discovered in the Linux kernel before 5.8.15. scalar32_min_max_or in kernel/bpf/verifier.c mishandles bounds tracking during use of 64-bit values, aka CID-5b9fbeb75b6…CVE-2020-271942.0% likely
  18. slaacd in OpenBSD 6.9 and 7.0 before 2022-03-22 has an integer signedness error and resultant heap-based buffer overflow triggerable by a crafted IPv6 router advertisement. NOTE:…CVE-2022-278821.9% likely
  19. Integer casting vulnerability in `update_recv_secondary_order` in FreeRDPCVE-2020-4032FreeRDP · CVSS 3.1 · 1.9% likely

    FreeRDP

  20. In libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative value) in the readSBits function (util/read.c). Remote attackers can leverage this v…CVE-2018-52511.8% likely
  21. Structured reply is a feature of the newstyle NBD protocol allowing the server to send a reply in chunks. A bounds check which was supposed to test for chunk offsets smaller than…CVE-2019-14842libnbd · CVSS 7.3 · 1.8% likely
  22. Denial of Service vulnerability in django-filterCVE-2020-15225carltongibson · CVSS 7.5 · 1.8% likely
  23. An issue was discovered in the MQTT input plugin in Fluent Bit through 1.0.4. When this plugin acts as an MQTT broker (server), it mishandles incoming network messages. After proc…CVE-2019-97491.7% likely
  24. Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-24884Microsoft · CVSS 8.8 · 1.6% likely

    Microsoft

  25. Windows Bluetooth Driver Elevation of Privilege VulnerabilityCVE-2023-23388Microsoft · CVSS 8.8 · 1.6% likely

    Microsoft

  26. PowerDNS Authoritative daemon , pdns versions 4.0.x before 4.0.9, 4.1.x before 4.1.11, exiting when encountering a serial between 2^31 and 2^32-1 while trying to notify a slave le…CVE-2019-10203Red Hat · CVSS 4.3 · 1.6% likely

    Red Hat

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in