Weakness (CWE)
CWE-680: Integer Overflow to Buffer Overflow
The product performs a calculation to determine how much memory to allocate, but an integer overflow can occur that causes less memory to be allocated than expected, leading to a buffer overflow.
Source: MITRE CWE-680
14 results · Clear filters · Feed
-
Medium 5.3
Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affe…
-
Medium 6.9
libvips: Possible integer overflow when reading multi-page TIFF images via ImageMagick
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built without libtiff support but with ImageMagick support can overflow the combined frame height while loading a crafted multi-page TIFF through VipsForeignLoa…
-
Medium 6.5
Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.
-
Medium 5.8
Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may …
-
Medium 5.5CVE-2026-25541 Public exploit
Bytes is vulnerable to integer overflow in BytesMut::reserve
Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique reclaim path of BytesMut::reserve, if the condition "v_capacity >= new_cap + offset" uses an un…
-
Medium 6.3
Out-of-bounds read vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may…
-
Medium 4.0
MongoDB C Driver bson_strfreev may be susceptible to integer overflow
The bson_strfreev function in the MongoDB C driver library may be susceptible to an integer overflow where the function will try to free memory at a negative offset. This may result in memory corruption. This issue affected libbson versions prior to 1.26.2
-
Medium 6.7
Pillow buffer overflow vulnerability
In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.
-
Medium 6.5
Integer overflow in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentiall…
-
Medium 6.7
Integer Overflow to Buffer Overflow in RIL
Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request.
-
Medium 6.7
Integer Overflow to Buffer Overflow in RIL
Memory corruption in RIL while trying to send apdu packet.
-
Medium 6.0
Integer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable d…
-
Medium 5.9
Integer overflow to buffer overflow in Modem
Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message.
-
Medium 6.9
Integer Overflow to Buffer Overflow in FreeRDP
In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server can instruct the client to allocate a buffer with a smaller size than requested due to an integer overflow in size calcu…