Skip to content
Noroxi

CWE-681 · 97 records

Incorrect Conversion between Numeric Types

CVEs in this class

97 records

  • CVE-2022-34169
    55Plan

    Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

    HighCVSS 7.5Proof of conceptEPSS 81%

    apache · xalan-javaJul 19, 2022

  • CVE-2016-3074
    50Plan

    Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or

    CriticalCVSS 9.8Proof of conceptEPSS 37%

    libgd · libgdApr 26, 2016

  • CVE-2009-0231
    46Plan

    The Embedded OpenType (EOT) Font Engine (T2EMBED.DLL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and S

    HighCVSS 8.8No exploitEPSS 37%

    microsoft · windows 2000Jul 15, 2009

  • CVE-2017-7308
    40Plan

    The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data

    HighCVSS 7.8WeaponizedEPSS 17%

    linux · linux kernelMar 29, 2017

  • CVE-2019-19317
    40Plan

    lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to ca

    CriticalCVSS 9.8No exploitEPSS 4%

    sqlite · sqliteDec 5, 2019

  • CVE-2019-14842
    40Plan

    Structured reply is a feature of the newstyle NBD protocol allowing the server to send a reply in chunks.

    CriticalCVSS 9.8No exploitEPSS 1%

    redhat · libnbdNov 26, 2019

  • CVE-2021-38187
    39Monitor

    An issue was discovered in the anymap crate through 0.12.1 for Rust.

    CriticalCVSS 9.8No exploitEPSS 1%

    anymap project · anymapAug 8, 2021

  • CVE-2022-40138
    39Monitor

    An integer conversion error in Hermes bytecode generation, prior to commit 6aa825e480d48127b480b08d13adf70033237097, could have been used to

    CriticalCVSS 9.8No exploitEPSS 1%

    facebook · hermesOct 10, 2022

  • CVE-2021-36357
    39Monitor

    An issue was discovered in OpenPOWER 2.6 firmware.

    CriticalCVSS 9.8No exploitEPSS 1%

    openpowerfoundation · skibootOct 22, 2021

  • CVE-2008-1721
    37Monitor

    Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a ne

    HighCVSS 7.5Proof of conceptEPSS 22%

    python · pythonApr 10, 2008

  • CVE-2024-26162
    36Monitor

    Microsoft ODBC Driver Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 2%

    microsoft · windows 10 1507Mar 12, 2024

  • CVE-2023-24884
    35Monitor

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    microsoft · windows 10 1507Apr 11, 2023

  • CVE-2023-23388
    35Monitor

    Windows Bluetooth Driver Elevation of Privilege Vulnerability

    HighCVSS 8.8Proof of conceptEPSS 1%

    microsoft · windows 10 1507Mar 14, 2023

  • CVE-2024-49093
    35Monitor

    Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    microsoft · windows 11 24h2Dec 11, 2024

  • CVE-2021-23997
    35Monitor

    Due to unexpected data type conversions, a use-after-free could have occurred when interacting with the font cache.

    HighCVSS 8.8No exploitEPSS 0%

    mozilla · firefoxJun 24, 2021

  • CVE-2026-77412
    35Monitor

    RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client

    HighCVSS 8.9No exploitEPSS 0%

    rabbitmq · amqp091-goSep 16, 2026

  • CVE-2026-53053
    35Monitor

    iommu/amd: Fix clone_alias() to use the original device's devid

    HighCVSS 8.8No exploitEPSS 0%

    linux · linux kernelJun 24, 2026

  • CVE-2008-3282
    34Monitor

    Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1,

    HighCVSS 7.8No exploitEPSS 10%

    apache · openofficeAug 29, 2008

  • CVE-2026-55768
    34Monitor

    GoAccess WebSocket Server: Signed 32 bit truncation of the 64 bit frame length causes a remote pre-authentication denial of service

    HighCVSS 8.7No exploitEPSS 0%

    allinurl · goaccessJul 30, 2026

  • CVE-2026-4931
    34Monitor

    Smart contract Marginal v1 performs unsafe downcast, allowing attackers to settle a large debt position for a negligible asset cost.

    HighCVSS 8.6No exploitEPSS 0%

    marginal · v1-coreApr 7, 2026

  • CVE-2026-82457
    34Monitor

    su-exec through 0.3 Privilege Escalation via Numeric User ID

    HighCVSS 8.5No exploitEPSS 0%

    ncopa · su-execAug 29, 2026

  • CVE-2023-46848
    33Monitor

    Squid: denial of service in ftp

    HighCVSS 7.5No exploitEPSS 10%

    squid-cache · squidNov 3, 2023

  • CVE-2025-53733
    33Monitor

    Microsoft Word Remote Code Execution Vulnerability

    HighCVSS 8.4No exploitEPSS 0%

    microsoft · 365 appsAug 12, 2025

  • CVE-2007-4988
    32Monitor

    Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code

    HighCVSS 7.8No exploitEPSS 3%

    imagemagick · imagemagickSep 24, 2007

  • CVE-2026-69438
    32Monitor

    Microsoft JScript Remote Code Execution Vulnerability

    HighCVSS 8.1No exploitEPSS 0%

    microsoft · windows 10 1607Sep 8, 2026

All vulnerability classes