CWE-191 · Memory Corruption
Integer Underflow (Wrap or Wraparound)
592CVEs
SortMost likely exploited
592 CVEs with CWE-191 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2014-0497In CISA KEVExploitedInteger underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote att…Adobe · Flash Player · CVSS 8.8 · 2014-02-05 | 8.8 | 100% | 2014-02-05 |
| CVE-2021-31956In CISA KEVExploitedWindows NTFS Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2021-06-08 | 7.8 | 22% | 2021-06-08 |
| CVE-2020-36228An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service.Openldap · Openldap · 2021-01-25 | – | 85% | 2021-01-25 |
| CVE-2020-36221An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c…Openldap · Openldap · 2021-01-25 | – | 85% | 2021-01-25 |
| CVE-2024-38063Windows TCP/IP Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 9.8 · 2024-08-13 | 9.8 | 74% | 2024-08-13 |
| CVE-2017-14496Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause…Thekelleys · Dnsmasq · 2017-10-02 | – | 68% | 2017-10-02 |
| CVE-2023-31102Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive.7-Zip · 7-Zip · CVSS 7.8 · 2023-11-03 | 7.8 | 54% | 2023-11-03 |
| CVE-2020-1400A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerabilit…Microsoft · Windows 10 Version 2004 for 32-bit Systems · 2020-07-14 | – | 24% | 2020-07-14 |
| CVE-2024-114777-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability7-Zip · 7-Zip · CVSS 7.8 · 2024-11-22 | 7.8 | 22% | 2024-11-22 |
| CVE-2007-0063Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1…Vmware · Ace · 2007-09-21 | – | 20% | 2007-09-21 |
| CVE-2014-8768Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow remote attackers to cause a denial of service (segmentation fa…Redhat · Tcpdump · 2014-11-20 | – | 20% | 2014-11-20 |
| CVE-2005-0199Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service (application crash) and possibly execute…Barton · Ngircd · 2005-02-06 | – | 19% | 2005-02-06 |
| CVE-2021-31178Microsoft Office Information Disclosure VulnerabilityMicrosoft · Microsoft Office 2019 · CVSS 5.5 · 2021-05-11 | 5.5 | 16% | 2021-05-11 |
| CVE-2022-22715Named Pipe File System Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2022-02-09 | 7.8 | 14% | 2022-02-09 |
| CVE-2009-3301Integer underflow in filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitra…Apache · Openoffice · 2010-02-16 | – | 12% | 2010-02-16 |
| CVE-2004-0816Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (application crash) via a malformed IP pack…Linux · Linux Kernel · 2004-10-26 | – | 12% | 2004-10-26 |
| CVE-2023-38162DHCP Server Service Denial of Service VulnerabilityMicrosoft · Windows Server 2019 · CVSS 7.5 · 2023-09-12 | 7.5 | 11% | 2023-09-12 |
| CVE-2016-10166Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impac…Libgd · Libgd · 2017-03-15 | – | 11% | 2017-03-15 |
| CVE-2026-42980NT OS Kernel Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 7.8 · 2026-06-09 | 7.8 | 9.2% | 2026-06-09 |
| CVE-2015-5212Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remot…Libreoffice · Libreoffice · 2015-11-10 | – | 8.7% | 2015-11-10 |
| CVE-2023-42118Exim libspf2 Integer Underflow Remote Code Execution VulnerabilityExim · libspf2 · CVSS 7.5 · 2024-05-03 | 7.5 | 8.4% | 2024-05-03 |
| CVE-2018-20181rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function seamless_process() and results in memory corru…Rdesktop · Rdesktop · 2019-03-15 | – | 8.2% | 2019-03-15 |
| CVE-2018-20180rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function rdpsnddbg_process() and results in memory corr…Rdesktop · Rdesktop · 2019-03-15 | – | 8.2% | 2019-03-15 |
| CVE-2018-20179rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function lspci_process() and results in memory corrupti…Rdesktop · Rdesktop · 2019-03-15 | – | 6.8% | 2019-03-15 |
| CVE-2020-1239A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is…Microsoft · Windows 10 Version 2004 for 32-bit Systems · 2020-06-09 | – | 6.1% | 2020-06-09 |
| CVE-2014-9087Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a crafted OID in a (1…Gnupg · Libksba · 2014-12-01 | – | 5.7% | 2014-12-01 |
| CVE-2010-2497Integer underflow in glyph handling in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a craf…Freetype · Freetype · 2010-08-19 | – | 5.6% | 2010-08-19 |
| CVE-2017-3034Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable integer overflow vulnerability in the XML Forms Architect…Adobe · Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.2007… · 2017-04-12 | – | 5.2% | 2017-04-12 |
| CVE-2020-15900A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' cal…Artifex · Ghostscript · 2020-07-28 | – | 5.2% | 2020-07-28 |
| CVE-2016-2316chan_sip in Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3, when…Digium · Asterisk · 2016-02-22 | – | 5.0% | 2016-02-22 |
| CVE-2021-37706Potential integer underflow upon receiving STUN message in PJSIPpjsip · pjproject · CVSS 7.3 · 2021-12-22 | 7.3 | 4.9% | 2021-12-22 |
| CVE-2023-26421ZDI-CAN-19832: Adobe Acrobat Reader DC Doc Object Integer Underflow Remote Code Execution VulnerabilityAdobe · Acrobat Reader · CVSS 7.8 · 2023-04-12 | 7.8 | 4.6% | 2023-04-12 |
| CVE-2011-1770Integer underflow in the dccp_parse_options function (net/dccp/options.c) in the Linux kernel before 2.6.33.14 allows remote attackers to cause a denial of service via a Datagram…Linux · Linux Kernel · 2011-06-24 | – | 4.4% | 2011-06-24 |
| CVE-2010-4164Multiple integer underflows in the x25_parse_facilities function in net/x25/x25_facilities.c in the Linux kernel before 2.6.36.2 allow remote attackers to cause a denial of servic…Linux · Linux Kernel · 2011-01-03 | – | 4.3% | 2011-01-03 |
| CVE-2021-2390Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit…Oracle Corporation · MySQL Server · CVSS 5.9 · 2021-07-20 | 5.9 | 4.3% | 2021-07-20 |
| CVE-2018-16601An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component.…Amazon · Freertos · 2018-12-06 | – | 4.2% | 2018-12-06 |
| CVE-2022-24046This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 11.2.13 build 5792329…Sonos · One Speaker · CVSS 9.8 · 2022-02-18 | 9.8 | 4.1% | 2022-02-18 |
| CVE-2020-24370ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal(3,2^31).Lua · Lua · 2020-08-17 | – | 3.8% | 2020-08-17 |
| CVE-2018-14353An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c has an integer underflow.Mutt · Mutt · 2018-07-17 | – | 3.7% | 2018-07-17 |
| CVE-2020-11909The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow.Treck · Tcp/ip · CVSS 9.1 · 2020-06-17 | 9.1 | 3.6% | 2020-06-17 |
| CVE-2018-14817Fuji Electric V-Server 4.0.3.0 and prior, An integer underflow vulnerability has been identified, which may allow remote code execution.Fuji Electric · V-Server · 2018-09-26 | – | 3.6% | 2018-09-26 |
| CVE-2017-14997GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (excessive memory allocation) because of an integer underflow in ReadPICTImage in coders/pict.c.Graphicsmagick · Graphicsmagick · 2017-10-03 | – | 3.4% | 2017-10-03 |
| CVE-2020-28194Variable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length field is less than 2. It has an impact only when the attacker…Accel-Ppp · Accel-Ppp · 2021-02-01 | – | 3.1% | 2021-02-01 |
| CVE-2016-1925Integer underflow in header.c in lha allows remote attackers to have unspecified impact via a large header size value for the (1) level0 or (2) level1 header in a lha archive, whi…Lha For Unix Project · Lha For Unix · 2017-01-23 | – | 3.0% | 2017-01-23 |
| CVE-2017-9214In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the…Openvswitch · Openvswitch · 2017-05-23 | – | 2.9% | 2017-05-23 |
| CVE-2021-21897A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overfl…Ribbonsoft · Ribbonsoft · CVSS 8.8 · 2021-09-08 | 8.8 | 2.9% | 2021-09-08 |
| CVE-2013-6425Integer underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0, as used in X.Org server and cairo, allows context-dependent attackers to cause a denial…Pixman · Pixman · 2014-01-18 | – | 2.9% | 2014-01-18 |
| CVE-2013-6424Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.Pixman · Pixman · 2014-01-18 | – | 2.9% | 2014-01-18 |
| CVE-2023-28293Windows Kernel Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2023-04-11 | 7.8 | 2.9% | 2023-04-11 |
| CVE-2019-5459An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.Videolan · VLC · 2019-07-30 | – | 2.8% | 2019-07-30 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.