Vulnerabilities > Integer Overflow or Wraparound

DATE CVE VULNERABILITY TITLE RISK
2021-07-26 CVE-2021-25803 Integer Overflow or Wraparound vulnerability in Videolan VLC Media Player 3.0.11
A buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file.
local
low complexity
videolan CWE-190
7.1
2021-07-26 CVE-2021-31292 Integer Overflow or Wraparound vulnerability in multiple products
An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service (DOS) via crafted metadata.
network
low complexity
exiv2 debian fedoraproject CWE-190
7.5
2021-07-23 CVE-2021-24036 Integer Overflow or Wraparound vulnerability in Facebook Hhvm
Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds write on the heap with the possibility of remote code execution.
network
low complexity
facebook CWE-190
critical
9.8
2021-07-22 CVE-2021-35942 Integer Overflow or Wraparound vulnerability in multiple products
The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information.
network
low complexity
gnu netapp debian CWE-190
critical
9.1
2021-07-21 CVE-2020-19490 Integer Overflow or Wraparound vulnerability in Tinyexr Project Tinyexr 0.9.5
tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code.
local
low complexity
tinyexr-project CWE-190
5.5
2021-07-21 CVE-2020-19497 Integer Overflow or Wraparound vulnerability in Matio Project Matio 1.5.17
Integer overflow vulnerability in Mat_VarReadNextInfo5 in mat5.c in tbeu matio (aka MAT File I/O Library) 1.5.17, allows attackers to cause a Denial of Service or possibly other unspecified impacts.
network
low complexity
matio-project CWE-190
8.8
2021-07-20 CVE-2021-33909 Integer Overflow or Wraparound vulnerability in multiple products
fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05.
7.8
2021-07-19 CVE-2021-20110 Integer Overflow or Wraparound vulnerability in Zohocorp Manageengine Assetexplorer 1.0.34
Due to Manage Engine Asset Explorer Agent 1.0.34 not validating HTTPS certificates, an attacker on the network can statically configure their IP address to match the Asset Explorer's Server IP address.
network
low complexity
zohocorp CWE-190
critical
9.8
2021-07-14 CVE-2021-34510 Integer Overflow or Wraparound vulnerability in Microsoft products
Storage Spaces Controller Elevation of Privilege Vulnerability
local
low complexity
microsoft CWE-190
7.8
2021-07-14 CVE-2021-34512 Integer Overflow or Wraparound vulnerability in Microsoft products
Storage Spaces Controller Elevation of Privilege Vulnerability
local
low complexity
microsoft CWE-190
7.8