Skip to content
OpenAdvisories

Weakness (CWE)

CWE-191: Integer Underflow (Wrap or Wraparound)

Base Draft

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

More detail

This can happen in signed and unsigned cases.

Source: MITRE CWE-191

All Critical High Medium Low Exploited only Public exploit

162 results · Clear filters · Feed

  • Medium 5.5
    CVE-2019-1628

    Cisco Integrated Management Controller Denial of Service Vulnerability

    A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of service (DoS) condition on an affected device. The vulnerability is due to inco…

    Cisco Cisco Unified Computing System (Management Software) Network devices
  • Medium 5.0
    CVE-2017-15874

    archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violatio…

    busybox busybox Debian Alpine