Skip to content
OpenAdvisories

Weakness (CWE)

CWE-128: Wrap-around Error

Base Incomplete

Wrap around errors occur whenever a value is incremented past the maximum value for its type and therefore "wraps around" to a very small, negative, or undefined value.

How to prevent it (3 mitigations)

  1. Requirements specification: The choice could be made to use a language that is not susceptible to these issues.

  2. Architecture and Design

    Provide clear upper and lower bounds on the scale of any protocols designed.

  3. Implementation

    Perform validation on all incremented variables to ensure that they remain within reasonable bounds.

Source: MITRE CWE-128

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-16909

    Vulnerabilities in IBM AIX and PowerVM VIOS

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an off-by-one error in bounds checking.

    IBM AIX PowerVM VIOS
  • High 8.8
    CVE-2024-23981

    Wrap-around error in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before versio…