Skip to content
OpenAdvisories

Weakness (CWE)

CWE-192: Integer Coercion Error

Variant Incomplete

Integer coercion refers to a set of flaws pertaining to the type casting, extension, or truncation of primitive data types.

How to prevent it (3 mitigations)

  1. Requirements

    A language which throws exceptions on ambiguous data casts might be chosen.

  2. Architecture and Design

    Design objects and program flow such that multiple or complex casts are unnecessary

  3. Implementation

    Ensure that any data type casting that you must use is entirely understood in order to reduce the plausibility of error in use.

Source: MITRE CWE-192

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-86143

    In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to …

    xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu
  • Medium 5.3
    CVE-2014-125012

    FFmpeg dxtroy.c integer coercion

    A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is an unknown function of the file libavcodec/dxtroy.c. The manipulation leads to integer coercion error. It is possible to launch the attack remotely. It is recommended …

  • Medium 5.3
    CVE-2014-125011

    FFmpeg ansi.c decode_frame integer coercion

    A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the function decode_frame of the file libavcodec/ansi.c. The manipulation leads to integer coercion error. The attack can be launched remotely. It …