Skip to content
OpenAdvisories

Weakness (CWE)

CWE-197: Numeric Truncation Error

Base Incomplete

Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.

How to prevent it (1 mitigation)

  1. Implementation

    Ensure that no casts, implicit or explicit, take place that move from a larger size primitive or a smaller size primitive.

Source: MITRE CWE-197

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.6
    CVE-2026-116012 Public exploit

    Ghidra before 12.2 Integer Truncation in PackedDecode::skipAttribute Decompiler Parser

    Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining in marshal.cc that stores 64-bit string lengths in 32-bit variables. Attackers can supply a crafted packed stream, such as a malicious .sl…

    NationalSecurityAgency ghidra
  • Critical 9.9
    CVE-2026-115889 Public exploit

    Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation

    Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, the Cranelift compiler backend bit-packs SSA value indices in a way that can silently overflow in release builds when compiling a sufficiently large or specially crafted Wasm function with ma…

    bytecodealliance wasmtime wasmtime rust-wasmtime Debian Ubuntu crates.io
  • High 7.2
    CVE-2025-6965 Public exploit EPSS 73%

    Integer Truncation on SQLite

    There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

    SQLite SQLite qt6-qtwebengine sqlite3 Debian Ubuntu Alpine NuGet
  • High 8.4
    CVE-2024-29050 Public exploit

    Windows Cryptographic Services Remote Code Execution Vulnerability

    Windows Cryptographic Services Remote Code Execution Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • Critical 9.3
    CVE-2022-42475 Exploited · Ransomware Public exploit EPSS 99%

    A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0…

    Fortinet FortiOS FortiProxy Network devices
    KEV Dec 13, 2022