Weakness (CWE)
CWE-680: Integer Overflow to Buffer Overflow
The product performs a calculation to determine how much memory to allocate, but an integer overflow can occur that causes less memory to be allocated than expected, leading to a buffer overflow.
Source: MITRE CWE-680
83 results · Clear filters · Feed
-
High 7.5
Integer overflow issue with strings in Redis
Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the underlying string library can be used to corrupt the heap and potentially result with denial of service or remote code execution. The vulnerability involves chan…
-
High 7.5
Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platforms
Redis is an open source, in-memory database that persists on disk. The redis-cli command line tool and redis-sentinel service may be vulnerable to integer overflow when parsing specially crafted large multi-bulk network replies. This is a result of a vulnerab…
-
High 7.5
Integer overflow issue with intsets in Redis
Redis is an open source, in-memory database that persists on disk. An integer overflow bug affecting all versions of Redis can be exploited to corrupt the heap and potentially be used to leak arbitrary contents of the heap or trigger remote code execution. Th…
-
High 7.5
Integer overflow issue with Streams in Redis
Redis is an open source, in-memory database that persists on disk. In affected versions an integer overflow bug in Redis can be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability involves changing the default pr…
-
High 7.5CVE-2021-32628 EPSS 13%
Vulnerability in handling large ziplists
Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the ziplist data structure used by all versions of Redis can be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability in…
-
High 8.8
Integer Overflow to Buffer Overflow in Hiredis
Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` protocol data. When parsing `multi-bulk` (array-like) replies, hi…
-
High 8.8
An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Ad…
-
High 8.8
An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Ad…
-
High 8.8
An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Ad…
-
High 8.8
An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Ad…
-
High 8.8
An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Ad…
-
High 8.8
An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Ad…
-
High 8.8
An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Ad…
-
High 8.8
An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Ad…
-
High 8.8
An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Ad…
-
High 8.8
Multiple exploitable integer truncation vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Proj…
-
High 8.8
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Projec…
-
High 8.8
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Projec…
-
High 8.8
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Projec…
-
High 8.8
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Projec…
-
High 8.8
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Projec…
-
High 8.8
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Projec…
-
High 8.8
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Projec…
-
High 8.8
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Projec…
-
High 8.8
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Projec…
-
High 8.8
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Projec…
-
High 8.8
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Projec…
-
High 8.8
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Projec…
-
High 8.8
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Projec…
-
High 8.8
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Projec…
-
High 8.8
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Projec…
-
High 8.8
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Projec…
-
High 8.1
A memory corruption vulnerability exists in the ISO Parsing functionality of Disc Soft Ltd Deamon Tools Pro 8.3.0.0767.…
-
High 8.8
An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on …
-
High 8.8
An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on …
-
High 8.8
An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on …
-
High 7.5CVE-2021-32761 EPSS 30%
Integer overflow issues with *BIT commands on 32-bit systems
Redis is an in-memory database that persists on disk. A vulnerability involving out-of-bounds read and integer overflow to buffer overflow exists starting with version 2.2 and prior to versions 5.0.13, 6.0.15, and 6.2.5. On 32-bit systems, Redis `*BIT*` comma…
-
High 7.5
Redis vulnerability in STRALGO LCS on 32-bit systems
Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis version 6.0 or newer, could be exploited using the STRALGO LCS command to corrupt the heap and potentially …
-
High 8.8CVE-2020-6116 EPSS 28%
An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitro Pro 13.…
-
High 8.8
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R67…