Advisories · Weakness
CWE-681.
Every Advisory and CVE whose sources give the weakness CWE-681, newest first.
- CVSS 6.5 Medium
Wallet for WooCommerce <= 1.5.6 - Authenticated (Subscriber+) Incorrect Conversion between Numeric Types
- subratamal Wallet for WooCommerce
- CWE-681
- CVSS 6.9 Medium
Incorrect numeric conversion in Siemens SIPLUS TIM 1531 IRC and others
- Siemens SIPLUS TIM 1531 IRC
- Siemens TIM 1531 IRC
- CWE-681
- CVSS 5.3 Medium
vyper's range(start, start + N) reverts for negative numbers
- CWE-681
>=0.3.8, <0.4.0 · fixed in 0.4.0
GHSA-ppx5-q359-pvwj · CVE-2024-32481 - CVSS 8.8 High
Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-681
- CVSS 7.5 High
Incorrect numeric conversion in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-681
- CVSS 8.6 HighCritical · CVSS 7+ and EPSS
Squid: denial of service in ftp
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 9.0 Extended Update Support
- CWE-681
- CVSS 5.9 Medium
Okio Signed to Unsigned Conversion Error vulnerability
- CWE-195
- CWE-681
>=2.0.0-RC1, <3.4.0 || <1.17.6 · fixed in 3.4.0, 1.17.6
GHSA-w33c-445m-f8w7 · CVE-2023-3635 - CVSS 8.6 High
Incorrect numeric conversion in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-681
- CVSS 7.8 High
NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-681
- CVSS 8.8 High
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-681
- CVSS 7.8 High
Windows Media Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-681
- CVSS 8.8 High
Windows Bluetooth Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-681
- CVSS 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
- Microsoft Office 2019
- Microsoft 365 Apps for Enterprise
- CWE-681
-
Incorrect numeric conversion in Facebook Hermes
- Facebook Hermes
- CWE-681
- CVSS 9.1 CriticalCritical · CVSS 9+
Besu VM vulnerable to gas allocation error in CALL operations
- CWE-196
- CWE-681
>=22.4.0-RC1, <22.7.1 · fixed in 22.7.1
GHSA-4456-w38r-m53x · CVE-2022-36025 - CVSS 7.5 HighCritical · CVSS 7+ and EPSS
Apache Xalan Java XSLT library integer truncation issue when processing malicious XSLT stylesheets
- CWE-681
<2.7.3 · fixed in 2.7.3
GHSA-9339-86wc-4qgf · CVE-2022-34169 - CVSS 8.1 High
Signed to Unsigned Conversion Error in Facebook Hermes
- CWE-195
- CWE-681
<0.5.2 · fixed in 0.5.2
GHSA-gmpm-xp43-f7g6 · CVE-2020-1913 - CVSS 8.2 High
EIPStackGroup OpENer Ethernet/IP Incorrect Conversion between Numeric Types
- EIPStackGroup OpENer EtherNet/IP
- CWE-681
- CVSS 7.5 High
Incorrect numeric conversion in F5 BIG-IP
- F5 BIG-IP
- CWE-681
-
Incorrect numeric conversion in kernel
- kernel
- CWE-681
- CVSS 7.5 High
Incorrect numeric conversion in FANUC R-30iA, R-30iA Mate and others
- FANUC R-30iA, R-30iA Mate
- FANUC R-30iB, R-30iB Mate, R-30iB Compact
- CWE-192
- CWE-681
- CVSS 7.5 High
SHL, SHR, and SAR operations trigger native exception at key values in besu
- hyperledger besu
- CWE-681
- CVSS 5.5 Medium
Overflow/crash in `tf.range`
- CWE-681
<2.4.4 || >=2.5.0, <2.5.2 || >=2.6.0, <2.6.1 · fixed in 2.4.4, 2.5.2, 2.6.1
GHSA-xrqm-fpgr-6hhx · CVE-2021-41202 - CVSS 9.8 CriticalCritical · CVSS 9+
Incorrect cast in anymap
- CWE-681
- CWE-704
<=0.12.1 · no fixed version yet
GHSA-hc92-9h3m-c39j · CVE-2021-38187 - CVSS 5.5 Medium
Integer overflow due to conversion to unsigned
- CWE-681
<2.4.3 || >=2.5.0, <2.5.1 · fixed in 2.4.3, 2.5.1
GHSA-9w2p-5mgw-p94c · CVE-2021-37645 - CVSS 5.5 Medium
Bad alloc in `StringNGrams` caused by integer conversion
- CWE-681
<2.3.4 || >=2.4.0, <2.4.3 || >=2.5.0, <2.5.1 · fixed in 2.3.4, 2.4.3, 2.5.1
GHSA-h6jh-7gv5-28vg · CVE-2021-37646 - CVSS 5.5 Medium
Crash caused by integer conversion to unsigned
- CWE-681
<2.3.4 || >=2.4.0, <2.4.3 || >=2.5.0, <2.5.1 · fixed in 2.3.4, 2.4.3, 2.5.1
GHSA-gf88-j2mg-cc82 · CVE-2021-37661 - CVSS 5.5 Medium
Crash in NMS ops caused by integer conversion to unsigned
- CWE-681
<2.3.4 || >=2.4.0, <2.4.3 || >=2.5.0, <2.5.1 · fixed in 2.3.4, 2.4.3, 2.5.1
GHSA-vmjw-c2vp-p33c · CVE-2021-37669 - CVSS 7.1 High
Heap OOB in nested `tf.map_fn` with `RaggedTensor`s
- Memory corruption
- CWE-681
<2.3.4 || >=2.4.0, <2.4.3 || >=2.5.0, <2.5.1 · fixed in 2.3.4, 2.4.3, 2.5.1
GHSA-g8wg-cjwc-xhhp · CVE-2021-37679 - CVSS 2.5 Low
Segfault in tf.raw_ops.ImmutableConst
- CWE-681
<2.1.4 || >=2.2.0, <2.2.3 || >=2.3.0, <2.3.3 || >=2.4.0, <2.4.2 · fixed in 2.1.4, 2.2.3, 2.3.3, 2.4.2
GHSA-g4h2-gqm3-c9wq · CVE-2021-29539 - CVSS 4.0 Medium
Incorrect numeric conversion in Linux Kernel
- Linux Kernel
- CWE-681
- CVSS 7.8 High
Linux kernel bpf verifier incorrect mod32 truncation
- Linux kernel
- CWE-681
- CVSS 7.5 High
Potential DoS with NumberFilter conversion to integer values.
- CWE-681
<2.4.0 · fixed in 2.4.0
GHSA-x7gm-rfgv-w973 · CVE-2020-15225 - CVSS 3.1 Low
Integer casting vulnerability in `update_recv_secondary_order` in FreeRDP
- FreeRDP
- CWE-681
- CVSS 2.6 Low
Heap buffer overflow in `UnsortedSegmentSum` in TensorFlow
- Memory corruption
- CWE-681
<1.15.0 · fixed in 1.15.0
GHSA-844w-j86r-4x2j · CVE-2019-16778 - CVSS 7.3 High
Incorrect numeric conversion in [UNKNOWN] libnbd
- [UNKNOWN] libnbd
- CWE-681
- CVSS 4.3 Medium
Incorrect numeric conversion in Red Hat pdns
- Red Hat pdns
- CWE-681
- CVSS 7.8 HighCritical · CVSS 7+ and EPSS
Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote attackers to cause a den…
- CWE-681