CWE-189 · Other weaknesses
Numeric Errors
1,171CVEs
1exploited
0with a public check
171likely (EPSS 10%+)
SortMost likely exploited
1,171 CVEs with CWE-189 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2013-2094In CISA KEVExploitedThe perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a craf…Linux · Kernel · CVSS 8.4 · 2013-05-14 | 8.4 | 48% | 2013-05-14 |
| CVE-2015-1538Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitra…Google · Android · 2015-10-01 | – | 99% | 2015-10-01 |
| CVE-2006-3747Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is…Apache · Http Server · 2006-07-28 | – | 97% | 2006-07-28 |
| CVE-2007-0071Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file with a negative Sc…Adobe · Flash Player · 2008-04-09 | – | 93% | 2008-04-09 |
| CVE-2015-3829Off-by-one error in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary cod…Google · Android · 2015-10-01 | – | 90% | 2015-10-01 |
| CVE-2015-3864Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execu…Google · Android · 2015-10-01 | – | 87% | 2015-10-01 |
| CVE-2015-1539Multiple integer underflows in the ESDS::parseESDescriptor function in ESDS.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code v…Google · Android · 2015-10-01 | – | 86% | 2015-10-01 |
| CVE-2010-2156ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID.Isc · Dhcp · 2010-06-07 | – | 76% | 2010-06-07 |
| CVE-2011-2371Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote atta…Mozilla · Seamonkey · 2011-06-30 | – | 76% | 2011-06-30 |
| CVE-2012-1182The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validat…Samba · Samba · 2012-04-10 | – | 74% | 2012-04-10 |
| CVE-2015-3087Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172,…Adobe · Air · 2015-05-13 | – | 74% | 2015-05-13 |
| CVE-2013-4124Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a…Samba · Samba · 2013-08-05 | – | 69% | 2013-08-05 |
| CVE-2009-2990Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vect…Adobe · Acrobat · 2009-10-19 | – | 69% | 2009-10-19 |
| CVE-2015-5560Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Ad…Adobe · Flash Player · 2015-08-14 | – | 66% | 2015-08-14 |
| CVE-2013-4074The dissect_capwap_data function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly uses a -1 data valu…Wireshark · Wireshark · 2013-06-09 | – | 61% | 2013-06-09 |
| CVE-2011-0257Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PnSize opco…Apple · Quicktime · 2011-08-15 | – | 60% | 2011-08-15 |
| CVE-2008-5159Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to cause a denial of service (c…Clientsoftware · Wincome Mpd Total · 2008-11-18 | – | 60% | 2008-11-18 |
| CVE-2013-3138Integer overflow in the TCP/IP kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT…Microsoft · Windows 7 · 2013-06-12 | – | 59% | 2013-06-12 |
| CVE-2008-0550Off-by-one error in Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a certain HTTP request that lead…Radio Toolbox · Steamcast · 2008-02-01 | – | 54% | 2008-02-01 |
| CVE-2007-5348Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and…Microsoft · Digital Image Suite · 2008-09-10 | – | 53% | 2008-09-10 |
| CVE-2007-3034Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 allows remote attackers to execute arbi…Microsoft · Windows 2000 · 2007-08-14 | – | 52% | 2007-08-14 |
| CVE-2010-0028Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG (.JPG) file, aka…Microsoft · Windows 2000 · 2010-02-10 | – | 48% | 2010-02-10 |
| CVE-2007-3456Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variab…Adobe · Flash Player · 2007-07-11 | – | 48% | 2007-07-11 |
| CVE-2008-0387Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via c…Firebirdsql · Firebird · 2008-01-29 | – | 46% | 2008-01-29 |
| CVE-2010-0010Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to ca…Apache · Http Server · 2010-02-02 | – | 43% | 2010-02-02 |
| CVE-2006-3445Integer overflow in the ReadWideString function in agentdpv.dll in Microsoft Agent on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to exec…Microsoft · Windows 2000 · 2006-11-14 | – | 43% | 2006-11-14 |
| CVE-2012-2386Integer overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x before 5.4.4 allows remote attackers to cause a denial of service…Php · Php · 2012-07-07 | – | 42% | 2012-07-07 |
| CVE-2006-2376Integer overflow in the PolyPolygon function in Graphics Rendering Engine on Microsoft Windows 98 and Me allows remote attackers to execute arbitrary code via a Windows Metafile (…Microsoft · Windows 98 · 2006-06-13 | – | 41% | 2006-06-13 |
| CVE-2009-2754Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix Dyna…Ibm · Informix Dynamic Server · 2010-03-05 | – | 40% | 2010-03-05 |
| CVE-2015-0135IBM Domino 8.5 before 8.5.3 FP6 IF4 and 9.0 before 9.0.1 FP3 IF2 allows remote attackers to execute arbitrary code or cause a denial of service (integer truncation and application…Ibm · Domino · 2015-04-21 | – | 40% | 2015-04-21 |
| CVE-2008-3015Integer overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Wor…Microsoft · Digital Image Suite · 2008-09-10 | – | 39% | 2008-09-10 |
| CVE-2009-0221Integer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a PowerPoint file containing a crafted record type for…Microsoft · Office Powerpoint · 2009-05-12 | – | 38% | 2009-05-12 |
| CVE-2009-0561Integer overflow in Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open X…Microsoft · Office · 2009-06-10 | – | 37% | 2009-06-10 |
| CVE-2009-1831The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an…Nullsoft · Winamp · 2009-05-29 | – | 36% | 2009-05-29 |
| CVE-2012-6330The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to cause a denial of service (memory consum…Twiki · Twiki · 2013-01-04 | – | 36% | 2013-01-04 |
| CVE-2008-0107Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Micros…Microsoft · Data Engine · 2008-07-08 | – | 35% | 2008-07-08 |
| CVE-2011-0026Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WD…Microsoft · Data Access Components · 2011-01-12 | – | 34% | 2011-01-12 |
| CVE-2009-1385Integer underflow in the e1000_clean_rx_irq function in drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel before 2.6.30-rc8, the e1000e driver in the Linux ke…Intel · E1000 · 2009-06-04 | – | 34% | 2009-06-04 |
| CVE-2011-1213Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted header in a .lzh a…Ibm · Lotus Notes · 2011-05-31 | – | 33% | 2011-05-31 |
| CVE-2012-5166ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to cause a denial of service (name…Isc · Bind · 2012-10-10 | – | 33% | 2012-10-10 |
| CVE-2011-0097Integer underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Com…Microsoft · Excel · 2011-04-13 | – | 32% | 2011-04-13 |
| CVE-2009-2506Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3; Works 8.5; Office Converter Pack; and WordPad in Windows 2000 SP4, XP SP2 and SP3, and Serv…Microsoft · Office Converter Pack · 2009-12-09 | – | 31% | 2009-12-09 |
| CVE-2008-2249Integer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary co…Microsoft · Windows 2000 · 2008-12-10 | – | 31% | 2008-12-10 |
| CVE-2011-0098Integer signedness error in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Off…Microsoft · Excel · 2011-04-13 | – | 30% | 2011-04-13 |
| CVE-2014-3669Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to caus…Php · Php · 2014-10-29 | – | 29% | 2014-10-29 |
| CVE-2009-2524Integer underflow in the NTLM authentication feature in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Window…Microsoft · Windows 7 · 2009-10-14 | – | 28% | 2009-10-14 |
| CVE-2013-6934The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service…Live555 · Streaming Media · 2014-01-23 | – | 28% | 2014-01-23 |
| CVE-2011-0041Integer overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Office XP SP…Microsoft · Office · 2011-04-13 | – | 28% | 2011-04-13 |
| CVE-2013-0006Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka…Microsoft · Xml Core Services · CVSS 8.8 · 2013-01-09 | 8.8 | 28% | 2013-01-09 |
| CVE-2011-1137Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service (memory consumption leading to OOM kill) via…Proftpd · Proftpd · 2011-03-11 | – | 28% | 2011-03-11 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.