CWE-190: Integer Overflow
The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes the result will always be larger than the original value.
Yearly Trend
Top Affected Vendors
All Integer Overflow CVEs (529)
This vulnerability in Python's cryptography package allows integer overflow and buffer overflow when encrypting multi-gigabyte values using symmetric ...
Feb 7, 2021CVE-2019-16127 is an integer overflow vulnerability in Atmel Advanced Software Framework (ASF) 4's flash_read, flash_write, and flash_append functions...
Oct 22, 2020An integer overflow vulnerability in Avast Antivirus for Windows allows attackers to escalate privileges on affected systems. This affects Avast Antiv...
Dec 1, 2025An integer overflow vulnerability in the calloc() function of QNX runtime libraries allows attackers to cause denial of service or execute arbitrary c...
Aug 17, 2021A low-privileged remote attacker can execute arbitrary code by sending specially crafted calls to the Device Manager web service or local API, exploit...
Jan 27, 2026This CVE describes an integer overflow vulnerability in the Graphics component of Mozilla products that allows sandbox escape. Attackers could exploit...
Jan 13, 2026This vulnerability allows attackers to trigger a heap out-of-bounds write by providing an excessively large BigInt string to QuickJS. Successful explo...
Oct 16, 2025An integer overflow vulnerability in Microsoft Windows Speech components allows authenticated attackers to execute arbitrary code with elevated privil...
Oct 14, 2025An integer overflow vulnerability in the SVG component of Mozilla products allows attackers to execute arbitrary code or cause denial of service. This...
Sep 16, 2025An integer overflow vulnerability in the Windows Kernel allows authenticated attackers to escalate privileges locally. This affects Windows systems wh...
Sep 9, 2025This vulnerability in ImageMagick allows integer overflow during PNG/MNG image processing, leading to memory corruption. Attackers can exploit this by...
Aug 13, 2025This vulnerability allows attackers within Bluetooth range to execute arbitrary code with root privileges on Sony XAV-AX8500 infotainment systems with...
Jun 21, 2025This vulnerability allows remote attackers to execute arbitrary code by tricking users into opening malicious ICO files in GIMP. An integer overflow d...
Jun 6, 2025This vulnerability in Windows Telephony Service allows remote attackers to execute arbitrary code on affected systems by sending specially crafted req...
Jan 14, 2025This is a remote code execution vulnerability in the Windows Telephony Service that allows attackers to execute arbitrary code on affected systems. It...
Jan 14, 2025An integer overflow vulnerability in RedisBloom's CMS.INITBYDIM command allows authenticated Redis clients to allocate less heap memory than required,...
Jan 8, 2025CVE-2018-9472 is an integer overflow vulnerability in libxml2's xmlmemory.c that can lead to out-of-bounds write and remote code execution. It affects...
Nov 20, 2024This vulnerability allows attackers to gain SYSTEM-level privileges on Windows systems by exploiting an integer overflow in the Kernel Streaming WOW T...
Aug 13, 2024This vulnerability allows remote attackers to execute arbitrary code on systems running vulnerable versions of SQL Server Native Client OLE DB Provide...
Jul 9, 2024CVE-2024-30064 is a Windows kernel elevation of privilege vulnerability that allows authenticated attackers to execute arbitrary code with SYSTEM priv...
Jun 11, 2024This CVE describes an integer overflow vulnerability in Apple's WebKit browser engine that could allow arbitrary code execution when processing malici...
Jun 10, 2024This CVE-2023-40474 vulnerability in GStreamer allows remote attackers to execute arbitrary code by exploiting an integer overflow when parsing malici...
May 3, 2024This vulnerability in GStreamer's RealMedia file parser allows remote attackers to execute arbitrary code by exploiting an integer overflow when proce...
May 3, 2024This vulnerability allows remote attackers to execute arbitrary code by exploiting an integer overflow in GStreamer's FLAC file parser. Attackers can ...
May 3, 2024This vulnerability in Microsoft OLE DB Driver for SQL Server allows remote attackers to execute arbitrary code on affected systems by sending speciall...
Apr 9, 2024This vulnerability in Microsoft ODBC Driver for SQL Server allows remote attackers to execute arbitrary code by sending specially crafted requests to ...
Apr 9, 2024This vulnerability in Microsoft's WDAC OLE DB provider for SQL Server allows remote attackers to execute arbitrary code by exploiting an integer overf...
Mar 12, 2024This vulnerability in Microsoft's WDAC OLE DB provider for SQL Server allows remote attackers to execute arbitrary code by exploiting an integer overf...
Mar 12, 2024A heap-based buffer overflow vulnerability in the GGUF library header.n_kv functionality of llama.cpp allows remote code execution when processing mal...
Feb 26, 2024A heap-based buffer overflow vulnerability in llama.cpp's GGUF library allows remote code execution when processing malicious .gguf files. This affect...
Feb 26, 2024This vulnerability allows remote attackers to execute arbitrary code on affected Windows systems through malicious OLE objects. It affects Windows sys...
Feb 13, 2024An integer overflow vulnerability in FreeImage's BMP plugin allows attackers to read memory contents, crash applications, or execute arbitrary code wh...
Jan 9, 2024This CVE-2023-5869 vulnerability in PostgreSQL allows authenticated database users to execute arbitrary code on the server through an integer overflow...
Dec 10, 2023This CVE describes an integer overflow vulnerability in Chrome's USB component that could allow heap corruption. Attackers could exploit this via a ma...
Nov 1, 2023A buffer overflow vulnerability in OpenImageIO's read_rle_image function allows remote attackers to execute arbitrary code or cause denial of service....
Oct 23, 2023This CVE describes an integer overflow vulnerability in Android's Bluetooth stack (gatt_sr.cc) that allows remote attackers within Bluetooth range to ...
Sep 11, 2023This vulnerability allows remote attackers to execute arbitrary code on affected Windows systems by sending specially crafted packets to the Layer-2 B...
Jul 11, 2023This vulnerability allows remote attackers to execute arbitrary code on affected systems by exploiting integer overflow in Microsoft PostScript and PC...
Mar 14, 2023This vulnerability allows remote attackers to execute arbitrary code on Windows systems via the Bluetooth service without user interaction. It affects...
Mar 14, 2023This vulnerability allows remote code execution through the Microsoft WDAC OLE DB provider for SQL Server. Attackers can exploit integer overflow (CWE...
Feb 14, 2023This vulnerability in Vyper smart contract language allows integer overflow/underflow when using <iface>.returns_int128() in complex expressions, lead...
Apr 13, 2022This vulnerability is an integer overflow in Chrome's Mojo IPC framework that could allow a remote attacker to trigger heap corruption by tricking use...
Apr 5, 2022An integer overflow vulnerability in WatchGuard Firebox and XTM appliances allows authenticated remote attackers to trigger a heap-based buffer overfl...
Feb 24, 2022This CVE describes an integer overflow vulnerability in TensorFlow's Grappler component during cost estimation for crop and resize operations. Attacke...
Feb 4, 2022CVE-2022-22826 is an integer overflow vulnerability in Expat's XML parser that can lead to heap memory corruption. Attackers can exploit this by provi...
Jan 10, 2022This integer overflow vulnerability in Accops HyWorks DVM Tools allows local attackers to execute arbitrary code with kernel privileges or crash the o...
Dec 7, 2021This integer overflow vulnerability in Accops HyWorks DVM Tools allows local attackers to execute arbitrary code with kernel privileges or crash the o...
Dec 7, 2021This vulnerability in NoMachine Cloud Server allows local attackers to execute arbitrary code with kernel privileges or cause denial of service throug...
Dec 7, 2021CVE-2021-42987 is an integer overflow vulnerability in Eltima USB Network Gate's IOCTL handler that allows local attackers to execute arbitrary code w...
Dec 7, 2021This vulnerability in Amzetta zPortal Windows zClient allows local attackers to execute arbitrary code with kernel privileges or cause denial of servi...
Dec 7, 2021About Integer Overflow (CWE-190)
The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes the result will always be larger than the original value.
Our database tracks 529 CVEs classified as CWE-190, with 104 rated critical and 305 rated high severity. The average CVSS score for Integer Overflow vulnerabilities is 7.8.
External reference: View CWE-190 on MITRE CWE →
Monitor Integer Overflow Vulnerabilities
Get alerted when new Integer Overflow CVEs affect your infrastructure.
Start Monitoring Free