# CWE-681.

Every Advisory and CVE whose sources give the weakness CWE-681, newest first.

## Records, newest first (an older page)

- [Wallet for WooCommerce <= 1.5.6 - Authenticated (Subscriber+) Incorrect Conversion between Numeric Types](https://agentprime.io/advisories/CVE-2024-7747.md)
  `CVE-2024-7747` · CVE record: subratamal Wallet for WooCommerce · CVSS 6.5 Medium · Not analysed yet · Published 28 Nov 2024 · Tags: CWE-681
- [Incorrect numeric conversion in Siemens SIPLUS TIM 1531 IRC and others](https://agentprime.io/advisories/CVE-2022-40225.md)
  `CVE-2022-40225` · CVE record: Siemens SIPLUS TIM 1531 IRC and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 11 Jun 2024 · Tags: CWE-681
- [vyper's range(start, start + N) reverts for negative numbers](https://agentprime.io/advisories/GHSA-ppx5-q359-pvwj.md)
  `GHSA-ppx5-q359-pvwj`, `CVE-2024-32481`, `PYSEC-2024-246` · PyPI `vyper`: affected `>=0.3.8, <0.4.0`, fixed in `0.4.0` · CVSS 5.3 Medium · Not analysed yet · Published 25 Apr 2024 · Tags: CWE-681
- [Microsoft ODBC Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-26162.md)
  `CVE-2024-26162` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-681
- [Incorrect numeric conversion in Mozilla Firefox and others](https://agentprime.io/advisories/CVE-2024-1552.md)
  `CVE-2024-1552` · CVE record: Mozilla Firefox and 2 more · CVSS 7.5 High · Not analysed yet · Published 20 Feb 2024 · Tags: CWE-681
- [Squid: denial of service in ftp](https://agentprime.io/advisories/CVE-2023-46848.md)
  `CVE-2023-46848` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 8.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.11 · Not analysed yet · Published 3 Nov 2023 · Tags: CWE-681
- [Okio Signed to Unsigned Conversion Error vulnerability](https://agentprime.io/advisories/GHSA-w33c-445m-f8w7.md)
  `GHSA-w33c-445m-f8w7`, `CVE-2023-3635` · Maven `com.squareup.okio:okio` and 1 more: affected `>=2.0.0-RC1, <3.4.0 || <1.17.6`, fixed in `3.4.0`, `1.17.6` · CVSS 5.9 Medium · Not analysed yet · Published 12 Jul 2023 · Tags: CWE-195, CWE-681
- [Incorrect numeric conversion in Cisco Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2023-20006.md)
  `CVE-2023-20006` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 28 Jun 2023 · Tags: CWE-681
- [NTFS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-29346.md)
  `CVE-2023-29346` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jun 2023 · Tags: CWE-681
- [Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-24884.md)
  `CVE-2023-24884` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Apr 2023 · Tags: CWE-681
- [Windows Media Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-23401.md)
  `CVE-2023-23401` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Mar 2023 · Tags: CWE-681
- [Windows Bluetooth Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-23388.md)
  `CVE-2023-23388` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Mar 2023 · Tags: CWE-681
- [Microsoft Office Visio Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-21736.md)
  `CVE-2023-21736` · CVE record: Microsoft Microsoft Office 2019 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Jan 2023 · Tags: CWE-681
- [Incorrect numeric conversion in Facebook Hermes](https://agentprime.io/advisories/CVE-2022-40138.md)
  `CVE-2022-40138` · CVE record: Facebook Hermes · No CVSS score · Not analysed yet · Published 11 Oct 2022 · Tags: CWE-681
- [Besu VM vulnerable to gas allocation error in CALL operations](https://agentprime.io/advisories/GHSA-4456-w38r-m53x.md)
  `GHSA-4456-w38r-m53x`, `CVE-2022-36025` · Maven `org.hyperledger.besu:evm`: affected `>=22.4.0-RC1, <22.7.1`, fixed in `22.7.1` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Sept 2022 · Tags: CWE-196, CWE-681
- [Apache Xalan Java XSLT library integer truncation issue when processing malicious XSLT stylesheets](https://agentprime.io/advisories/GHSA-9339-86wc-4qgf.md)
  `GHSA-9339-86wc-4qgf`, `BIT-java-2022-34169`, `BIT-java-min-2022-34169`, `BIT-jre-2022-34169`, `CVE-2022-34169` · Maven `xalan:xalan`: affected `<2.7.3`, fixed in `2.7.3` · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.82 · Not analysed yet · Published 20 Jul 2022 · Tags: CWE-681
- [Signed to Unsigned Conversion Error in Facebook Hermes](https://agentprime.io/advisories/GHSA-gmpm-xp43-f7g6.md)
  `GHSA-gmpm-xp43-f7g6`, `CVE-2020-1913` · npm `hermes-engine`: affected `<0.5.2`, fixed in `0.5.2` · CVSS 8.1 High · Not analysed yet · Published 24 May 2022 · Tags: CWE-195, CWE-681
- [EIPStackGroup OpENer Ethernet/IP Incorrect Conversion between Numeric Types](https://agentprime.io/advisories/CVE-2021-27478.md)
  `CVE-2021-27478` · CVE record: EIPStackGroup OpENer EtherNet/IP · CVSS 8.2 High · Not analysed yet · Published 12 May 2022 · Tags: CWE-681
- [Incorrect numeric conversion in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-27189.md)
  `CVE-2022-27189` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 5 May 2022 · Tags: CWE-681
- [Incorrect numeric conversion in kernel](https://agentprime.io/advisories/CVE-2022-0322.md)
  `CVE-2022-0322` · CVE record: kernel · No CVSS score · Not analysed yet · Published 25 Mar 2022 · Tags: CWE-681
- [Incorrect numeric conversion in FANUC R-30iA, R-30iA Mate and others](https://agentprime.io/advisories/CVE-2021-32996.md)
  `CVE-2021-32996` · CVE record: FANUC R-30iA, R-30iA Mate and 2 more · CVSS 7.5 High · Not analysed yet · Published 7 Jan 2022 · Tags: CWE-192, CWE-681
- [SHL, SHR, and SAR operations trigger native exception at key values in besu](https://agentprime.io/advisories/CVE-2021-41272.md)
  `CVE-2021-41272` · CVE record: hyperledger besu · CVSS 7.5 High · Not analysed yet · Published 13 Dec 2021 · Tags: CWE-681
- [Overflow/crash in \`tf.range\`](https://agentprime.io/advisories/GHSA-xrqm-fpgr-6hhx.md)
  `GHSA-xrqm-fpgr-6hhx`, `BIT-tensorflow-2021-41202`, `CVE-2021-41202`, `PYSEC-2021-395`, `PYSEC-2021-612`, `PYSEC-2021-810` · PyPI `tensorflow` and 2 more: affected `<2.4.4 || >=2.5.0, <2.5.2 || >=2.6.0, <2.6.1`, fixed in `2.4.4`, `2.5.2`, `2.6.1` · CVSS 5.5 Medium · Not analysed yet · Published 10 Nov 2021 · Tags: CWE-681
- [Incorrect cast in anymap](https://agentprime.io/advisories/GHSA-hc92-9h3m-c39j.md)
  `GHSA-hc92-9h3m-c39j`, `CVE-2021-38187`, `RUSTSEC-2021-0065` · crates.io `anymap`: affected `<=0.12.1`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2021 · Tags: CWE-681, CWE-704
- [Integer overflow due to conversion to unsigned](https://agentprime.io/advisories/GHSA-9w2p-5mgw-p94c.md)
  `GHSA-9w2p-5mgw-p94c`, `BIT-tensorflow-2021-37645`, `CVE-2021-37645`, `PYSEC-2021-267`, `PYSEC-2021-558`, `PYSEC-2021-756` · PyPI `tensorflow` and 2 more: affected `<2.4.3 || >=2.5.0, <2.5.1`, fixed in `2.4.3`, `2.5.1` · CVSS 5.5 Medium · Not analysed yet · Published 25 Aug 2021 · Tags: CWE-681
- [Bad alloc in \`StringNGrams\` caused by integer conversion](https://agentprime.io/advisories/GHSA-h6jh-7gv5-28vg.md)
  `GHSA-h6jh-7gv5-28vg`, `BIT-tensorflow-2021-37646`, `CVE-2021-37646`, `PYSEC-2021-268`, `PYSEC-2021-559`, `PYSEC-2021-757` · PyPI `tensorflow` and 2 more: affected `<2.3.4 || >=2.4.0, <2.4.3 || >=2.5.0, <2.5.1`, fixed in `2.3.4`, `2.4.3`, `2.5.1` · CVSS 5.5 Medium · Not analysed yet · Published 25 Aug 2021 · Tags: CWE-681
- [Crash caused by integer conversion to unsigned](https://agentprime.io/advisories/GHSA-gf88-j2mg-cc82.md)
  `GHSA-gf88-j2mg-cc82`, `BIT-tensorflow-2021-37661`, `CVE-2021-37661`, `PYSEC-2021-283`, `PYSEC-2021-574`, `PYSEC-2021-772` · PyPI `tensorflow` and 2 more: affected `<2.3.4 || >=2.4.0, <2.4.3 || >=2.5.0, <2.5.1`, fixed in `2.3.4`, `2.4.3`, `2.5.1` · CVSS 5.5 Medium · Not analysed yet · Published 25 Aug 2021 · Tags: CWE-681
- [Crash in NMS ops caused by integer conversion to unsigned](https://agentprime.io/advisories/GHSA-vmjw-c2vp-p33c.md)
  `GHSA-vmjw-c2vp-p33c`, `BIT-tensorflow-2021-37669`, `CVE-2021-37669`, `PYSEC-2021-291`, `PYSEC-2021-582`, `PYSEC-2021-780` · PyPI `tensorflow` and 2 more: affected `<2.3.4 || >=2.4.0, <2.4.3 || >=2.5.0, <2.5.1`, fixed in `2.3.4`, `2.4.3`, `2.5.1` · CVSS 5.5 Medium · Not analysed yet · Published 25 Aug 2021 · Tags: CWE-681
- [Heap OOB in nested \`tf.map_fn\` with \`RaggedTensor\`s](https://agentprime.io/advisories/GHSA-g8wg-cjwc-xhhp.md)
  `GHSA-g8wg-cjwc-xhhp`, `BIT-tensorflow-2021-37679`, `CVE-2021-37679`, `PYSEC-2021-301`, `PYSEC-2021-592`, `PYSEC-2021-790` · PyPI `tensorflow` and 2 more: affected `<2.3.4 || >=2.4.0, <2.4.3 || >=2.5.0, <2.5.1`, fixed in `2.3.4`, `2.4.3`, `2.5.1` · CVSS 7.1 High · Not analysed yet · Published 25 Aug 2021 · Tags: Memory corruption, CWE-681
- [Segfault in tf.raw_ops.ImmutableConst](https://agentprime.io/advisories/GHSA-g4h2-gqm3-c9wq.md)
  `GHSA-g4h2-gqm3-c9wq`, `BIT-tensorflow-2021-29539`, `CVE-2021-29539`, `PYSEC-2021-176`, `PYSEC-2021-467`, `PYSEC-2021-665` · PyPI `tensorflow` and 2 more: affected `<2.1.4 || >=2.2.0, <2.2.3 || >=2.3.0, <2.3.3 || >=2.4.0, <2.4.2`, fixed in `2.1.4`, `2.2.3`, `2.3.3`, `2.4.2` · CVSS 2.5 Low · Not analysed yet · Published 21 May 2021 · Tags: CWE-681
- [Incorrect numeric conversion in Linux Kernel](https://agentprime.io/advisories/CVE-2020-28588.md)
  `CVE-2020-28588` · CVE record: Linux Kernel · CVSS 4.0 Medium · Not analysed yet · Published 10 May 2021 · Tags: CWE-681
- [Linux kernel bpf verifier incorrect mod32 truncation](https://agentprime.io/advisories/CVE-2021-3444.md)
  `CVE-2021-3444` · CVE record: Linux kernel · CVSS 7.8 High · Not analysed yet · Published 23 Mar 2021 · Tags: CWE-681
- [Potential DoS with NumberFilter conversion to integer values.](https://agentprime.io/advisories/GHSA-x7gm-rfgv-w973.md)
  `GHSA-x7gm-rfgv-w973`, `CVE-2020-15225`, `PYSEC-2021-64` · PyPI `django-filter`: affected `<2.4.0`, fixed in `2.4.0` · CVSS 7.5 High · Not analysed yet · Published 28 Sept 2020 · Tags: CWE-681
- [Integer casting vulnerability in \`update_recv_secondary_order\` in FreeRDP](https://agentprime.io/advisories/CVE-2020-4032.md)
  `CVE-2020-4032` · CVE record: FreeRDP FreeRDP · CVSS 3.1 Low · Not analysed yet · Published 22 Jun 2020 · Tags: CWE-681
- [Heap buffer overflow in \`UnsortedSegmentSum\` in TensorFlow](https://agentprime.io/advisories/GHSA-844w-j86r-4x2j.md)
  `GHSA-844w-j86r-4x2j`, `CVE-2019-16778`, `PYSEC-2019-209`, `PYSEC-2019-227`, `PYSEC-2019-234` · PyPI `tensorflow` and 2 more: affected `<1.15.0`, fixed in `1.15.0` · CVSS 2.6 Low · Not analysed yet · Published 16 Dec 2019 · Tags: Memory corruption, CWE-681
- [Incorrect numeric conversion in \[UNKNOWN\] libnbd](https://agentprime.io/advisories/CVE-2019-14842.md)
  `CVE-2019-14842` · CVE record: \[UNKNOWN\] libnbd · CVSS 7.3 High · Not analysed yet · Published 26 Nov 2019 · Tags: CWE-681
- [Incorrect numeric conversion in Red Hat pdns](https://agentprime.io/advisories/CVE-2019-10203.md)
  `CVE-2019-10203` · CVE record: Red Hat pdns · CVSS 4.3 Medium · Not analysed yet · Published 22 Nov 2019 · Tags: CWE-681
- [Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote attackers to cause a den…](https://agentprime.io/advisories/CVE-2008-3282.md)
  `CVE-2008-3282` · CVE record · CVSS 7.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.11 · Not analysed yet · Published 29 Aug 2008 · Tags: CWE-681

Newest: <https://agentprime.io/advisories/tag/cwe-681.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-681&cursor=WyIyMDI0LTEyLTEwVDE3OjQ5OjEzLjM1ODAwMFoiLCJDVkUtMjAyNC00OTA5MyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-681/?cursor=WyIyMDI0LTEyLTEwVDE3OjQ5OjEzLjM1ODAwMFoiLCJDVkUtMjAyNC00OTA5MyJd>. Everything for agents: <https://agentprime.io/llms.txt>.