Vulnerabilities > Integer Underflow (Wrap or Wraparound)

DATE CVE VULNERABILITY TITLE RISK
2024-09-18 CVE-2024-46759 Integer Underflow (Wrap or Wraparound) vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: hwmon: (adc128d818) Fix underflows seen when writing limit attributes DIV_ROUND_CLOSEST() after kstrtol() results in an underflow if a large negative number such as -9223372036854775808 is provided by the user. Fix it by reordering clamp_val() and DIV_ROUND_CLOSEST() operations.
local
low complexity
linux CWE-191
7.8
2024-09-18 CVE-2024-46730 Integer Underflow (Wrap or Wraparound) vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Ensure array index tg_inst won't be -1 [WHY & HOW] tg_inst will be a negative if timing_generator_count equals 0, which should be checked before used. This fixes 2 OVERRUN issues reported by Coverity.
local
low complexity
linux CWE-191
5.5
2024-09-13 CVE-2024-6258 Integer Underflow (Wrap or Wraparound) vulnerability in Zephyrproject Zephyr
BT: Missing length checks of net_buf in rfcomm_handle_data
low complexity
zephyrproject CWE-191
6.5
2024-09-13 CVE-2024-41857 Integer Underflow (Wrap or Wraparound) vulnerability in Adobe Illustrator
Illustrator versions 28.6, 27.9.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user.
local
low complexity
adobe CWE-191
7.8
2024-07-16 CVE-2022-48804 Integer Underflow (Wrap or Wraparound) vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: vt_ioctl: fix array_index_nospec in vt_setactivate array_index_nospec ensures that an out-of-bounds value is set to zero on the transient path.
local
low complexity
linux CWE-191
5.5
2024-07-01 CVE-2024-21466 Integer Underflow (Wrap or Wraparound) vulnerability in Qualcomm products
Information disclosure while parsing sub-IE length during new IE generation.
network
low complexity
qualcomm CWE-191
7.5
2024-06-24 CVE-2024-6285 Integer Underflow (Wrap or Wraparound) vulnerability in Renesas Rcar Gen3 V2.5
Integer Underflow (Wrap or Wraparound) vulnerability in Renesas arm-trusted-firmware. An integer underflow in image range check calculations could lead to bypassing address restrictions and loading of images to unallowed addresses.
local
low complexity
renesas CWE-191
6.7
2024-06-06 CVE-2024-5256 Integer Underflow (Wrap or Wraparound) vulnerability in Sonos ERA 100 Firmware 15.9
Sonos Era 100 SMB2 Message Handling Integer Underflow Information Disclosure Vulnerability.
low complexity
sonos CWE-191
4.3
2024-06-04 CVE-2024-32975 Integer Underflow (Wrap or Wraparound) vulnerability in Envoyproxy Envoy
Envoy is a cloud-native, open source edge and service proxy.
network
low complexity
envoyproxy CWE-191
7.5
2024-05-21 CVE-2023-52705 Integer Underflow (Wrap or Wraparound) vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix underflow in second superblock position calculations Macro NILFS_SB2_OFFSET_BYTES, which computes the position of the second superblock, underflows when the argument device size is less than 4096 bytes.
local
low complexity
linux CWE-191
5.5