CWE-195 · Memory Corruption
Signed to Unsigned Conversion Error
30CVEs
SortMost likely exploited
30 CVEs with CWE-195 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-43663An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a b…WellinTech · KingHistorian · CVSS 8.1 · 2023-03-20 | 8.1 | 14% | 2023-03-20 |
| CVE-2020-6096An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000. Calling memcpy() (on ARMv7 targets that utilize the GNU glibc im…Gnu · GNU glibc · CVSS 8.1 · 2020-04-01 | 8.1 | 5.5% | 2020-04-01 |
| CVE-2011-3045Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote att…Google · Chrome · CVSS 8.8 · 2012-03-22 | 8.8 | 3.3% | 2012-03-22 |
| CVE-2016-6560illumos osnet-incorporation bcopy() and bzero() implementations make signed instead of unsigned comparisons allowing a system crash.illumos · osnet-incorporation · 2017-03-31 | – | 1.7% | 2017-03-31 |
| CVE-2023-3635Okio GzipSource unhandled exception Denial of ServiceSquareup · Okio · CVSS 5.9 · 2023-07-12 | 5.9 | 1.3% | 2023-07-12 |
| CVE-2020-1913An Integer signedness error in the JavaScript Interpreter in Facebook Hermes prior to commit 2c7af7ec481ceffd0d14ce2d7c045e475fd71dc6 allows attackers to cause a denial of service…Facebook · Hermes · 2020-09-09 | – | 1.2% | 2020-09-09 |
| CVE-2026-85441MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Negative Serialized String Lengththemoos · core-moos · CVSS 7.5 · 2026-09-03 | 7.5 | 0.7% | 2026-09-03 |
| CVE-2026-26981OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cppAcademySoftwareFoundation · openexr · CVSS 6.5 · 2026-02-24 | 6.5 | 0.6% | 2026-02-24 |
| CVE-2026-77406RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configurationrabbitmq · amqp091-go · CVSS 8.2 · 2026-09-16 | 8.2 | 0.5% | 2026-09-16 |
| CVE-2026-20248Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service VulnerabilityCisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · CVSS 6.8 · 2026-09-16 | 6.8 | 0.5% | 2026-09-16 |
| CVE-2026-17507MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range senderLegion of the Bouncy Castle Inc. · BC-JAVA · CVSS 8.7 · 2026-10-02 | 8.7 | 0.4% | 2026-10-02 |
| CVE-2026-115678Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processingKeil · MDK-Middleware · CVSS 5.3 · 2026-10-26 | 5.3 | 0.4% | 2026-10-26 |
| CVE-2026-55991Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2NLnet Labs · Unbound · CVSS 5.9 · 2026-07-22 | 5.9 | 0.4% | 2026-07-22 |
| CVE-2025-67897In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take advantage of this issue to crash an application by sending a vi…sequoia-pgp · sequoia · CVSS 5.3 · 2025-12-14 | 5.3 | 0.4% | 2025-12-14 |
| CVE-2026-41682pupnp: Port truncation via atoi() cast in parse_uri() allows SSRF port confusionpupnp · pupnp · CVSS 6.9 · 2026-05-08 | 6.9 | 0.3% | 2026-05-08 |
| CVE-2026-74221U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINKu-boot · u-boot · CVSS 8.2 · 2026-09-29 | 8.2 | 0.3% | 2026-09-29 |
| CVE-2026-74220U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Replyu-boot · u-boot · CVSS 8.2 · 2026-09-29 | 8.2 | 0.3% | 2026-09-29 |
| CVE-2024-25388drivers/wlan/wlan_mgmt,c in RT-Thread through 5.0.2 has an integer signedness error and resultant buffer overflow.Rt-Thread · Rt-Thread · CVSS 8.4 · 2024-03-27 | 8.4 | 0.3% | 2024-03-27 |
| CVE-2026-115679Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX BufferKeil · MDK-Middleware · CVSS 6.5 · 2026-10-26 | 6.5 | 0.3% | 2026-10-26 |
| CVE-2026-102639MobilityDB through 1.3.0 Out-of-bounds Read DoS via WKB DeserializationMobilityDB · MobilityDB · CVSS 6.5 · 2026-09-29 | 6.5 | 0.3% | 2026-09-29 |
| CVE-2026-55737Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoderErlang · OTP · CVSS 5.1 · 2026-07-27 | 5.1 | 0.3% | 2026-07-27 |
| CVE-2025-65495Integer signedness error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted TLS certificate t…Libcoap · Libcoap · CVSS 7.5 · 2025-11-24 | 7.5 | 0.3% | 2025-11-24 |
| CVE-2025-30646Junos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crashJuniper Networks · Junos OS · CVSS 6.5 · 2025-04-09 | 6.5 | 0.3% | 2025-04-09 |
| CVE-2026-101937Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is usedJuniper Networks · Junos OS · CVSS 6.5 · 2026-10-14 | 6.5 | 0.2% | 2026-10-14 |
| CVE-2026-18444Integer Conversion Vulnerability Resulting in an Out of Bounds Read in NI LabVIEWNI · LabVIEW · CVSS 6.6 · 2026-08-25 | 6.6 | 0.2% | 2026-08-25 |
| CVE-2023-28063Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, le…Dell · CPG BIOS · CVSS 6.7 · 2024-02-06 | 6.7 | 0.2% | 2024-02-06 |
| CVE-2026-110735Godot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader (core/io/resource_format_binary.cpp, ResourceLoaderBinary::get_unicode_string). A string le…godotengine · Godot Engine · CVSS 2.5 · 2026-10-14 | 2.5 | 0.2% | 2026-10-14 |
| CVE-2026-115921ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attributeonnx · onnx · CVSS 6.2 · 2026-10-26 | 6.2 | 0.1% | 2026-10-26 |
| CVE-2025-24792Snowflake PHP PDO Driver has a Signed-to-Unsigned Conversion Errorsnowflakedb · pdo_snowflake · CVSS 4.4 · 2025-01-29 | 4.4 | 0.1% | 2025-01-29 |
| CVE-2023-33034Signed-to-unsigned conversion error in AudioQualcomm, Inc. · Snapdragon · CVSS 7.8 · 2023-10-03 | 7.8 | 0.1% | 2023-10-03 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.