CWE-190: Integer Overflow or Wraparound¶
MITRE Corporation. (2026). CWE-190: Integer Overflow or Wraparound.
Cited by¶
1 citation across 1 artifact.
Each citation links to the sentence it supports in the citing article.
Domain-specific¶
- Integer Overflow
- … bytes_per_pixel` in an image decoder, or `n_items * sizeof(item)` in an allocator — that overflows to a small value, causing an undersized buffer to be allocated; the subsequent write of the full intended data overruns the buffer, producing a heap or stack overflow that an attacker exploits for remote code execution.
This sourceThe catalogue entry whose description, allocator examples and consequence list give exactly this chain - an overflowing size calculation, an undersized allocation, a subsequent buffer overflow and arbitrary code execution - and which records CWE-680 as its child for the overflow-to-overrun step.
- … bytes_per_pixel` in an image decoder, or `n_items * sizeof(item)` in an allocator — that overflows to a small value, causing an undersized buffer to be allocated; the subsequent write of the full intended data overruns the buffer, producing a heap or stack overflow that an attacker exploits for remote code execution.
Verification¶
This reference passed the adversarial substantiation pipeline: it was checked to exist and to support the claim it is attached to. See how references were verified.
Registry ID ref:a26ac5001006 · see in the full table