Skip to content
Noroxi

CWE-195 · 24 records

Signed to Unsigned Conversion Error

CVEs in this class

24 records

  • CVE-2022-43663
    43Plan

    An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05.

    CriticalCVSS 9.8No exploitEPSS 14%

    wellintech · kinghistorianMar 20, 2023

  • CVE-2016-6560
    35Monitor

    illumos osnet-incorporation bcopy() and bzero() implementations make signed instead of unsigned comparisons allowing a system crash.

    HighCVSS 8.6No exploitEPSS 2%

    illumos · illumosMar 31, 2017

  • CVE-2026-74221
    35Monitor

    U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK

    HighCVSS 8.8No exploitEPSS 0%

    u-boot · u-bootSep 29, 2026

  • CVE-2026-74220
    35Monitor

    U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply

    HighCVSS 8.8No exploitEPSS 0%

    u-boot · u-bootSep 29, 2026

  • CVE-2020-6096
    34Monitor

    An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000.

    HighCVSS 8.1No exploitEPSS 5%

    gnu · glibcApr 1, 2020

  • CVE-2026-85441
    34Monitor

    MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Negative Serialized String Length

    HighCVSS 8.7No exploitEPSS 1%

    themoos · core-moosSep 3, 2026

  • CVE-2026-17507
    34Monitor

    MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender

    HighCVSS 8.7No exploitEPSS 0%

    legion of the bouncy castle inc. · bc-javaOct 2, 2026

  • CVE-2024-25388
    33Monitor

    drivers/wlan/wlan_mgmt,c in RT-Thread through 5.0.2 has an integer signedness error and resultant buffer overflow.

    HighCVSS 8.4No exploitEPSS 0%

    rt-thread · rt-threadMar 26, 2024

  • CVE-2020-1913
    32Monitor

    An Integer signedness error in the JavaScript Interpreter in Facebook Hermes prior to commit 2c7af7ec481ceffd0d14ce2d7c045e475fd71dc6 allows

    HighCVSS 8.1No exploitEPSS 1%

    facebook · hermesSep 9, 2020

  • CVE-2026-77406
    32Monitor

    RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration

    HighCVSS 8.2No exploitEPSS 0%

    rabbitmq · amqp091-goSep 16, 2026

  • CVE-2023-33034
    31Monitor

    Signed-to-unsigned conversion error in Audio

    HighCVSS 7.8No exploitEPSS 0%

    qualcomm · csra6620 firmwareOct 3, 2023

  • CVE-2023-3635
    30Monitor

    Okio GzipSource unhandled exception Denial of Service

    HighCVSS 7.5Proof of conceptEPSS 1%

    squareup · okioJul 12, 2023

  • CVE-2025-65495
    30Monitor

    Integer signedness error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of

    HighCVSS 7.5No exploitEPSS 0%

    libcoap · libcoapNov 24, 2025

  • CVE-2026-102639
    28Monitor

    MobilityDB through 1.3.0 Out-of-bounds Read DoS via WKB Deserialization

    HighCVSS 7.1No exploitEPSS 0%

    mobilitydb · mobilitydbSep 29, 2026

  • CVE-2025-30646
    28Monitor

    Junos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crash

    HighCVSS 7.1No exploitEPSS 0%

    juniper · junosApr 9, 2025

  • CVE-2026-41682
    27Monitor

    pupnp: Port truncation via atoi() cast in parse_uri() allows SSRF port confusion

    MediumCVSS 6.9No exploitEPSS 0%

    pupnp · pupnpMay 8, 2026

  • CVE-2026-20248
    27Monitor

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability

    MediumCVSS 6.8No exploitEPSS 0%

    cisco · cisco secure firewall adaptive security appliance (asa) softwareSep 16, 2026

  • CVE-2026-18444
    27Monitor

    Integer Conversion Vulnerability Resulting in an Out of Bounds Read in NI LabVIEW

    MediumCVSS 6.9No exploitEPSS 0%

    ni · labviewAug 25, 2026

  • CVE-2026-26981
    26Monitor

    OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpp

    MediumCVSS 6.5No exploitEPSS 0%

    openexr · openexrFeb 23, 2026

  • CVE-2026-55991
    23Monitor

    Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2

    MediumCVSS 5.9No exploitEPSS 0%

    nlnetlabs · unboundJul 22, 2026

  • CVE-2025-67897
    21Monitor

    In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short.

    MediumCVSS 5.3No exploitEPSS 0%

    sequoia-pgp · sequoiaDec 14, 2025

  • CVE-2026-55737
    20Monitor

    Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder

    MediumCVSS 5.1No exploitEPSS 0%

    erlang · erlang\/otpJul 27, 2026

  • CVE-2023-28063
    17Monitor

    Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability.

    MediumCVSS 4.4No exploitEPSS 0%

    dell · optiplex 3000 micro firmwareFeb 6, 2024

  • CVE-2025-24792
    17Monitor

    Snowflake PHP PDO Driver has a Signed-to-Unsigned Conversion Error

    MediumCVSS 4.4No exploitEPSS 0%

    snowflakedb · pdo_snowflakeJan 29, 2025

All vulnerability classes