Skip to content
OpenAdvisories

Weakness (CWE)

CWE-680: Integer Overflow to Buffer Overflow

Compound Draft Mapping discouraged

The product performs a calculation to determine how much memory to allocate, but an integer overflow can occur that causes less memory to be allocated than expected, leading to a buffer overflow.

Source: MITRE CWE-680

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.1
    CVE-2026-55200 Public exploit

    libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c

    libssh2 1.11.1, fixed in commit 97acf3d, contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field. Remote attackers can send crafted SSH packets with excessively large packet_length value…

    libssh2 libssh2 libssh2 libssh2 Debian Ubuntu Alpine
  • Medium 5.5
    CVE-2026-25541 Public exploit

    Bytes is vulnerable to integer overflow in BytesMut::reserve

    Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique reclaim path of BytesMut::reserve, if the condition "v_capacity >= new_cap + offset" uses an un…

    tokio-rs bytes rust-bytes bytes Debian Ubuntu crates.io
  • High 7.0
    CVE-2025-32023 Public exploit

    Redis allows out of bounds writes in hyperloglog commands leading to RCE

    Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially…

    Redis Redis redis redis Debian Ubuntu Alpine
  • High 7.0
    CVE-2022-24834 Public exploit EPSS 41%

    Heap overflow issue with the Lua cjson library used by Redis

    Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions…

    Redis Redis redis redis Debian Ubuntu Alpine