Vulnerabilities > Integer Underflow (Wrap or Wraparound)

DATE CVE VULNERABILITY TITLE RISK
2024-02-27 CVE-2021-46951 Integer Underflow (Wrap or Wraparound) vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: tpm: efi: Use local variable for calculating final log size When tpm_read_log_efi is called multiple times, which happens when one loads and unloads a TPM2 driver multiple times, then the global variable efi_tpm_final_log_size will at some point become a negative number due to the subtraction of final_events_preboot_size occurring each time.
local
low complexity
linux CWE-191
5.5
2024-01-24 CVE-2024-0808 Integer Underflow (Wrap or Wraparound) vulnerability in multiple products
Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file.
network
low complexity
google fedoraproject CWE-191
critical
9.8
2024-01-15 CVE-2024-0565 Integer Underflow (Wrap or Wraparound) vulnerability in multiple products
An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel.
low complexity
linux netapp CWE-191
7.4
2024-01-08 CVE-2023-39413 Integer Underflow (Wrap or Wraparound) vulnerability in Tonybybell Gtkwave 3.3.115
Multiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation functionality of GTKWave 3.3.115.
local
low complexity
tonybybell CWE-191
7.8
2024-01-08 CVE-2023-39414 Integer Underflow (Wrap or Wraparound) vulnerability in Tonybybell Gtkwave 3.3.115
Multiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation functionality of GTKWave 3.3.115.
local
low complexity
tonybybell CWE-191
7.3
2023-12-21 CVE-2023-48298 Integer Underflow (Wrap or Wraparound) vulnerability in Clickhouse and Clickhouse Cloud
ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time.
network
low complexity
clickhouse CWE-191
7.5
2023-12-05 CVE-2023-43628 Integer Underflow (Wrap or Wraparound) vulnerability in Gpsd Project Gpsd 3.25.1
An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1~dev.
network
low complexity
gpsd-project CWE-191
7.5
2023-11-07 CVE-2023-47360 Integer Underflow (Wrap or Wraparound) vulnerability in Videolan VLC Media Player
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length.
network
low complexity
videolan CWE-191
7.5
2023-11-03 CVE-2023-31102 Integer Underflow (Wrap or Wraparound) vulnerability in multiple products
Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive.
local
low complexity
7-zip netapp CWE-191
7.8
2023-10-12 CVE-2023-22308 Integer Underflow (Wrap or Wraparound) vulnerability in Softether VPN 5.01.9674/5.02
An integer underflow vulnerability exists in the vpnserver OvsProcessData functionality of SoftEther VPN 5.01.9674 and 5.02.
network
low complexity
softether CWE-191
7.5