CWE-681 · Memory Corruption
Incorrect Conversion between Numeric Types
107CVEs
SortMost likely exploited
107 CVEs with CWE-681 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-34169Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheetsApache Software Foundation · Apache Xalan-J · CVSS 7.5 · 2022-07-19 | 7.5 | 82% | 2022-07-19 |
| CVE-2009-0231The Embedded OpenType (EOT) Font Engine (T2EMBED.DLL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows…Microsoft · Windows 2000 · 2009-07-15 | – | 37% | 2009-07-15 |
| CVE-2016-3074Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via…Libgd · Libgd · 2016-04-26 | – | 36% | 2016-04-26 |
| CVE-2008-1721Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers i…Python · Python · 2008-04-10 | – | 23% | 2008-04-10 |
| CVE-2017-7308The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a d…Linux · Linux Kernel · 2017-03-29 | – | 18% | 2017-03-29 |
| CVE-2018-5711gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error…Php · Php · 2018-01-16 | – | 13% | 2018-01-16 |
| CVE-2023-46848Squid: denial of service in ftpRed Hat · Red Hat Enterprise Linux 9 · CVSS 8.6 · 2023-11-03 | 8.6 | 11% | 2023-11-03 |
| CVE-2008-3282Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote atta…Apache · Openoffice · CVSS 7.8 · 2008-08-29 | 7.8 | 11% | 2008-08-29 |
| CVE-2019-19317lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly hav…Sqlite · Sqlite · 2019-12-05 | – | 4.7% | 2019-12-05 |
| CVE-2020-6582Nagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small negative number as a large positive number during a bzero call.Nagios · Remote Plug In Executor · 2020-03-16 | – | 4.4% | 2020-03-16 |
| CVE-2010-2807FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service (application crash) or possibly execute…Freetype · Freetype · 2010-08-19 | – | 4.2% | 2010-08-19 |
| CVE-2021-27218An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length w…Gnome · Glib · 2021-02-15 | – | 4.1% | 2021-02-15 |
| CVE-2021-27219An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64…Gnome · Glib · 2021-02-15 | – | 3.1% | 2021-02-15 |
| CVE-2007-4988Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image…Imagemagick · Imagemagick · 2007-09-24 | – | 3.1% | 2007-09-24 |
| CVE-2015-3406The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SIGNATURE file to be treated as the signed portion via unspec…Module-Signature Project · Module-Signature · 2019-11-29 | – | 2.3% | 2019-11-29 |
| CVE-2024-26162Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 8.8 · 2024-03-12 | 8.8 | 2.0% | 2024-03-12 |
| CVE-2020-27194An issue was discovered in the Linux kernel before 5.8.15. scalar32_min_max_or in kernel/bpf/verifier.c mishandles bounds tracking during use of 64-bit values, aka CID-5b9fbeb75b6…Linux · Linux Kernel · 2020-10-16 | – | 2.0% | 2020-10-16 |
| CVE-2022-27882slaacd in OpenBSD 6.9 and 7.0 before 2022-03-22 has an integer signedness error and resultant heap-based buffer overflow triggerable by a crafted IPv6 router advertisement. NOTE:…Openbsd · Openbsd · 2022-03-25 | – | 1.9% | 2022-03-25 |
| CVE-2020-4032Integer casting vulnerability in `update_recv_secondary_order` in FreeRDPFreeRDP · FreeRDP · CVSS 3.1 · 2020-06-22 | 3.1 | 1.9% | 2020-06-22 |
| CVE-2018-5251In libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative value) in the readSBits function (util/read.c). Remote attackers can leverage this v…Libming · Libming · 2018-01-05 | – | 1.8% | 2018-01-05 |
| CVE-2019-14842Structured reply is a feature of the newstyle NBD protocol allowing the server to send a reply in chunks. A bounds check which was supposed to test for chunk offsets smaller than…Redhat · libnbd · CVSS 7.3 · 2019-11-26 | 7.3 | 1.8% | 2019-11-26 |
| CVE-2020-15225Denial of Service vulnerability in django-filtercarltongibson · django-filter · CVSS 7.5 · 2021-04-29 | 7.5 | 1.8% | 2021-04-29 |
| CVE-2019-9749An issue was discovered in the MQTT input plugin in Fluent Bit through 1.0.4. When this plugin acts as an MQTT broker (server), it mishandles incoming network messages. After proc…Treasuredata · Fluent Bit · 2019-03-13 | – | 1.7% | 2019-03-13 |
| CVE-2023-24884Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 8.8 · 2023-04-11 | 8.8 | 1.6% | 2023-04-11 |
| CVE-2023-23388Windows Bluetooth Driver Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 8.8 · 2023-03-14 | 8.8 | 1.6% | 2023-03-14 |
| CVE-2019-10203PowerDNS Authoritative daemon , pdns versions 4.0.x before 4.0.9, 4.1.x before 4.1.11, exiting when encountering a serial between 2^31 and 2^32-1 while trying to notify a slave le…Red Hat · pdns · CVSS 4.3 · 2019-11-22 | 4.3 | 1.6% | 2019-11-22 |
| CVE-2019-16200GNU Serveez through 0.2.2 has an Information Leak. An attacker may send an HTTP POST request to the /cgi-bin/reader URI. The attacker must include a Content-length header with a l…Gnu · Serveez · 2019-11-20 | – | 1.5% | 2019-11-20 |
| CVE-2021-41272SHL, SHR, and SAR operations trigger native exception at key values in besuhyperledger · besu · CVSS 7.5 · 2021-12-13 | 7.5 | 1.5% | 2021-12-13 |
| CVE-2021-38187An issue was discovered in the anymap crate through 0.12.1 for Rust. It violates soundness via conversion of a *u8 to a *u64.Anymap Project · Anymap · 2021-08-08 | – | 1.4% | 2021-08-08 |
| CVE-2017-17446The Mem_File_Reader::read_avail function in Data_Reader.cpp in the Game_Music_Emu library (aka game-music-emu) 0.6.1 does not ensure a non-negative size, which allows remote attac…Game-Music-Emu Project · Game-Music-Emu · 2017-12-06 | – | 1.3% | 2017-12-06 |
| CVE-2022-40138An integer conversion error in Hermes bytecode generation, prior to commit 6aa825e480d48127b480b08d13adf70033237097, could have been used to perform Out-Of-Bounds operations and s…Facebook · Hermes · 2022-10-11 | – | 1.2% | 2022-10-11 |
| CVE-2021-36357An issue was discovered in OpenPOWER 2.6 firmware. unpack_timestamp() calls le32_to_cpu() for endian conversion of a uint16_t "year" value, resulting in a type mismatch that can t…Openpowerfoundation · Skiboot · 2021-10-22 | – | 1.2% | 2021-10-22 |
| CVE-2021-27478EIPStackGroup OpENer Ethernet/IP Incorrect Conversion between Numeric TypesEIPStackGroup · OpENer EtherNet/IP · CVSS 8.2 · 2022-05-12 | 8.2 | 1.1% | 2022-05-12 |
| CVE-2020-28588An information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux Kernel 5.1 Stable and 5.4.66. More specifically, this issue has been introduced in v…Linux · Linux Kernel · CVSS 4 · 2021-05-10 | 4.0 | 1.1% | 2021-05-10 |
| CVE-2026-110051Microsoft Office Word Information Disclosure VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 6.5 · 2026-11-10 | 6.5 | 1.1% | 2026-11-10 |
| CVE-2024-49093Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityMicrosoft · Windows 11 Version 24H2 · CVSS 8.8 · 2024-12-10 | 8.8 | 0.9% | 2024-12-10 |
| CVE-2019-19958In libIEC61850 1.4.0, StringUtils_createStringFromBuffer in common/string_utilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation a…Mz-Automation · Libiec61850 · 2019-12-24 | – | 0.9% | 2019-12-24 |
| CVE-2021-0964In C2SoftMP3::process() of C2SoftMp3Dec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additi…Google · Android · 2021-12-15 | – | 0.9% | 2021-12-15 |
| CVE-2022-27189On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x a…F5 · BIG-IP · CVSS 7.5 · 2022-05-05 | 7.5 | 0.9% | 2022-05-05 |
| CVE-2023-20006A vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for…Cisco · Cisco Adaptive Security Appliance (ASA) Software · CVSS 8.6 · 2023-06-28 | 8.6 | 0.9% | 2023-06-28 |
| CVE-2021-23997Due to unexpected data type conversions, a use-after-free could have occurred when interacting with the font cache. We presume that with enough effort this could have been exploit…Mozilla · Firefox · 2021-06-24 | – | 0.8% | 2021-06-24 |
| CVE-2024-32481vyper's range(start, start + N) reverts for negative numbersvyperlang · vyper · CVSS 5.3 · 2024-04-25 | 5.3 | 0.8% | 2024-04-25 |
| CVE-2023-21736Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft · Microsoft Office 2019 · CVSS 7.8 · 2023-01-10 | 7.8 | 0.8% | 2023-01-10 |
| CVE-2026-69438Microsoft JScript Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 8.1 · 2026-09-08 | 8.1 | 0.7% | 2026-09-08 |
| CVE-2024-1552Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.*Note:* This issue only affects 32-bit ARM devices. This vulnerability…Mozilla · Firefox · CVSS 7.5 · 2024-02-20 | 7.5 | 0.7% | 2024-02-20 |
| CVE-2007-4268Integer signedness error in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted AppleTalk message with a neg…Apple · Mac Os X · 2007-11-15 | – | 0.7% | 2007-11-15 |
| CVE-2022-40225A vulnerability has been identified in SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). Casting an inte…Siemens · SIPLUS TIM 1531 IRC · CVSS 6.5 · 2024-06-11 | 6.5 | 0.6% | 2024-06-11 |
| CVE-2021-3444Linux kernel bpf verifier incorrect mod32 truncationLinux · kernel · CVSS 7.8 · 2021-03-23 | 7.8 | 0.6% | 2021-03-23 |
| CVE-2023-23401Windows Media Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2023-03-14 | 7.8 | 0.6% | 2023-03-14 |
| CVE-2025-53733Microsoft Word Remote Code Execution VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 8.4 · 2025-08-12 | 8.4 | 0.6% | 2025-08-12 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.