Vulnerabilities > Integer Overflow or Wraparound

DATE CVE VULNERABILITY TITLE RISK
2021-09-08 CVE-2021-40346 Integer Overflow or Wraparound vulnerability in multiple products
An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs.
network
low complexity
haproxy debian fedoraproject CWE-190
7.5
2021-09-08 CVE-2021-1878 Integer Overflow or Wraparound vulnerability in Apple mac OS X and Macos
An integer overflow was addressed with improved input validation.
network
low complexity
apple CWE-190
6.5
2021-09-08 CVE-2021-30663 Integer Overflow or Wraparound vulnerability in Apple products
An integer overflow was addressed with improved input validation.
network
low complexity
apple CWE-190
8.8
2021-09-08 CVE-2021-30760 Integer Overflow or Wraparound vulnerability in Apple products
An integer overflow was addressed through improved input validation.
local
low complexity
apple CWE-190
7.8
2021-09-07 CVE-2021-39254 Integer Overflow or Wraparound vulnerability in multiple products
A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfs_attr_record_resize, in NTFS-3G < 2021.8.22.
local
low complexity
tuxera debian fedoraproject CWE-190
7.8
2021-09-01 CVE-2021-30354 Integer Overflow or Wraparound vulnerability in Amazon Kindle Firmware
Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand() and results in a memory corruption that leads to code execution when parsing a crafted PDF book.
local
low complexity
amazon CWE-190
8.6
2021-09-01 CVE-2021-36058 Integer Overflow or Wraparound vulnerability in multiple products
XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Integer Overflow vulnerability potentially resulting in application-level denial of service in the context of the current user.
local
low complexity
adobe debian CWE-190
5.5
2021-08-31 CVE-2021-22684 Integer Overflow or Wraparound vulnerability in Samsung Tizenrt
Tizen RT RTOS version 3.0.GBB is vulnerable to integer wrap-around in functions_calloc and mm_zalloc.
network
low complexity
samsung CWE-190
7.5
2021-08-25 CVE-2021-21850 Integer Overflow or Wraparound vulnerability in multiple products
An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1.
network
low complexity
gpac debian CWE-190
8.8
2021-08-24 CVE-2021-30952 Integer Overflow or Wraparound vulnerability in multiple products
An integer overflow was addressed with improved input validation.
local
low complexity
apple fedoraproject debian CWE-190
7.8