Skip to content
OpenAdvisories

Weakness (CWE)

CWE-681: Incorrect Conversion between Numeric Types

Base Draft

When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.

How to prevent it (1 mitigation)

  1. Implementation

    Avoid making conversion between numeric types. Always check for the allowed ranges.

Source: MITRE CWE-681

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2023-3635 Public exploit

    Okio GzipSource unhandled exception Denial of Service

    GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class.

    com.squareup.okio:okio-jvm okio com.squareup.okio:okio Ubuntu Maven