Vulnerabilities > Incorrect Conversion between Numeric Types

DATE CVE VULNERABILITY TITLE RISK
2021-01-06 CVE-2020-13544 Incorrect Conversion between Numeric Types vulnerability in Softmaker Office 2021
An exploitable sign extension vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application.
network
softmaker CWE-681
6.8
2020-11-23 CVE-2019-14563 Incorrect Conversion between Numeric Types vulnerability in multiple products
Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
tianocore debian CWE-681
4.6
2020-09-09 CVE-2020-1913 Incorrect Conversion between Numeric Types vulnerability in Facebook Hermes
An Integer signedness error in the JavaScript Interpreter in Facebook Hermes prior to commit 2c7af7ec481ceffd0d14ce2d7c045e475fd71dc6 allows attackers to cause a denial of service attack or a potential RCE via crafted JavaScript.
network
facebook CWE-681
6.8
2020-07-09 CVE-2020-12417 Incorrect Conversion between Numeric Types vulnerability in multiple products
Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a potentially exploitable crash.
network
mozilla canonical opensuse CWE-681
critical
9.3
2020-06-22 CVE-2020-4032 Incorrect Conversion between Numeric Types vulnerability in multiple products
In FreeRDP before version 2.1.2, there is an integer casting vulnerability in update_recv_secondary_order.
4.3
2020-03-16 CVE-2020-6582 Incorrect Conversion between Numeric Types vulnerability in multiple products
Nagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small negative number as a large positive number during a bzero call.
network
low complexity
nagios fedoraproject CWE-681
7.5
2020-03-16 CVE-2019-19945 Incorrect Conversion between Numeric Types vulnerability in Openwrt 19.07.0
uhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error.
network
low complexity
openwrt CWE-681
7.5
2019-12-16 CVE-2019-16778 Incorrect Conversion between Numeric Types vulnerability in Google Tensorflow
In TensorFlow before 1.15, a heap buffer overflow in UnsortedSegmentSum can be produced when the Index template argument is int32.
network
low complexity
google CWE-681
7.5
2019-12-05 CVE-2019-19317 Incorrect Conversion between Numeric Types vulnerability in multiple products
lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.
network
low complexity
sqlite netapp oracle siemens CWE-681
7.5
2019-11-29 CVE-2015-3406 Incorrect Conversion between Numeric Types vulnerability in multiple products
The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SIGNATURE file to be treated as the signed portion via unspecified vectors.
network
low complexity
module-signature-project canonical CWE-681
6.4