Vulnerabilities > Incorrect Calculation

DATE CVE VULNERABILITY TITLE RISK
2017-07-06 CVE-2017-8932 Incorrect Calculation vulnerability in multiple products
A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated for specific input points.
network
high complexity
golang fedoraproject novell opensuse CWE-682
5.9
2017-05-11 CVE-2017-8905 Incorrect Calculation vulnerability in XEN
Xen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-215.
local
low complexity
xen CWE-682
6.8
2017-05-09 CVE-2017-0342 Incorrect Calculation vulnerability in Nvidia GPU Driver
All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where incorrect calculation may cause an invalid address access leading to denial of service or potential escalation of privileges.
local
low complexity
nvidia microsoft CWE-682
7.2
2017-04-29 CVE-2017-8326 Incorrect Calculation vulnerability in Entropymine Imageworsener
libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior issues, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image, related to imagew-bmp.c and imagew-util.c.
6.8
2017-04-07 CVE-2017-0545 Incorrect Calculation vulnerability in Google Android
An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process.
network
google CWE-682
critical
9.3
2017-02-22 CVE-2016-9377 Incorrect Calculation vulnerability in XEN
Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local HVM guest OS users to cause a denial of service (guest crash) by leveraging IDT entry miscalculation.
local
low complexity
xen CWE-682
2.1
2017-01-13 CVE-2016-7433 Incorrect Calculation vulnerability in NTP 4.2.4/4.2.7/4.2.8
NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a "root distance that did not include the peer dispersion."
network
low complexity
ntp CWE-682
5.3
2012-03-30 CVE-2011-3062 Incorrect Calculation vulnerability in Google Chrome
Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted OpenType file.
6.8
2012-02-02 CVE-2011-1573 Incorrect Calculation vulnerability in Linux Kernel
net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are used, does not consider the amount of zero padding during calculation of chunk lengths for (1) INIT and (2) INIT ACK chunks, which allows remote attackers to cause a denial of service (OOPS) via crafted packet data.
network
high complexity
linux CWE-682
5.9