Skip to content
OpenAdvisories

Weakness (CWE)

CWE-191: Integer Underflow (Wrap or Wraparound)

Base Draft

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

More detail

This can happen in signed and unsigned cases.

Source: MITRE CWE-191

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-58058 Public exploit

    Nmap - Integer Underflow in IPv6 Extension Header Parsing

    Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned t…

    Nmap Nmap nmap nmap Debian Ubuntu
  • Medium 5.6
    CVE-2025-47256 Public exploit

    Libxmp through 4.6.2 has a stack-based buffer overflow in depack_pha in loaders/prowizard/pha.c via a malformed Pha for…

    libxmp libxmp libxmp libxmp Debian Ubuntu