CWE-191: Integer Underflow (Wrap or Wraparound)

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

This can happen in signed and unsigned cases.

Consequences

• Availability: DoS: Crash, Exit, or Restart, DoS: Resource Consumption (CPU), DoS: Resource Consumption (Memory), DoS: Instability
• Integrity: Modify Memory
• Confidentiality, Availability, Access Control: Execute Unauthorized Code or Commands, Bypass Protection Mechanism

Recent advisories

• GHSA-p7gw-2pcp-5pf8 — Klever: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)
• GHSA-7wff-wpr6-vmhm — ImageMagick: Heap Buffer Over-Read in IPTC encoder
• GHSA-82j2-j2ch-gfr8 — rustls-webpki: Denial of service via panic on malformed CRL BIT STRING
• GHSA-cr67-pvmx-2pp2 — ImageMagick has a heap-Buffer-Overflow write of a single zero byte when parsing xml.
• GHSA-wpp4-vqfq-v4hp — ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)
• GHSA-h7jm-g87p-5935 — Microsoft Security Advisory CVE-2023-36796: .NET Remote Code Execution Vulnerability
• GHSA-38fq-h5hc-gwv8 — Microsoft Security Advisory CVE-2023-36794: .NET Remote Code Execution Vulnerability
• GHSA-hx9q-2mx4-m4pg — Missing validation causes denial of service via `Conv3DBackpropFilterV2`
• CVE-2022-0185 — A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the…
• GHSA-m539-j985-hcr8 — Crash in `max_pool3d` when size argument is 0 or negative
• GHSA-jm5c-rv3w-w83m — Denial of service in geth
• CVE-2021-31956 — Windows NTFS Elevation of Privilege Vulnerability

All advisories for CWE-191