Joris Vink core numeric error vulnerability

Versions of Joris Vink prior to 4.3.0 contain a numeric error vulnerability. This vulnerability stems from an integer underflow in HTTP request body processing. Unauthenticated attackers can bypass httpbodymax by sending a request body exceeding its declared length, causing contentlength to wrap...

Microsoft Edge (Chromium-based) numeric error vulnerability

Microsoft Edge Chromium-based versions prior to 154.0.4258.62 contain a numeric error vulnerability. This vulnerability stems from integer overflow or wrap-around errors and may allow unauthenticated attackers to escalate privileges over the network...

FasterXML jackson-dataformat-protobuf numeric error vulnerability

A numeric error vulnerability exists in FasterXML Jackson-DataFormat-ProtocolBuffer versions from 2.21.6 up to 2.21.8, from 2.22.0 up to 2.22.4, from 3.1.6 up to 3.1.8, and from 3.2.2 up to 3.2.4. This vulnerability arises because ProtobufParser.readStringKey utilizes signed arithmetic checks on...

Netty-TCNative digital error vulnerability

Versions of netty-tcnative prior to 2.0.84.Final and Netty netty-tcnative-boringsl-static prior to 2.0.84.Final contain a numeric error vulnerability. This vulnerability arises from an excessive reporting of consumed bytes within the BIO write callback tcnwritetobytebuffer. Remote TLS 1.3 clients...

National Security Agency Ghidra Software Reverse Engineering Framework Digital error vulnerability

Versions of the National Security Agency Ghidra Software Reverse Engineering Framework prior to 12.2 contain a numeric error vulnerability. This vulnerability arises because PackDecode::skipAttribute and skipAttributeRemaining store the length of a 64-bit string into a 32-bit variable in...

Pascal Buchbinder mod_qos numerical error vulnerability

Versions 11.74, 11.76, and 11.79 of Pascal Buchbinder’s modqos contain a numeric error vulnerability. This vulnerability arises from an off-by-one pointer calculation when merging request body parameters with existing URL query parameters. As a result, the query string is truncated during securit...

MongoDB C Driver numeric error vulnerability

Versions prior to MongoDB C Driver 1.30.14 and 2.5.7 contain a numeric error vulnerability. This vulnerability stems from a 32-bit integer wrap-around in Windows-specific Kerberos/SSPI authentication code. When excessively long credential values are provided in client connection configurations, a...

MongoDB C# Driver numeric error vulnerability

A numeric error vulnerability exists in MongoDB C Driver versions 2.0.0 through 3.13.0. This vulnerability stems from a flaw in the BSON processing library regarding numerical type conversion. Untrusted text inputs containing boundary values for binary subtype types can bypass integrity checks on...

Vyper numeric error vulnerability

In Vyper versions 0.3.8 through 0.5.0b1, there is a numeric error vulnerability stemming from improper optimizer compilation. Under conditions where -O gas or -O codesize is enabled, expressions such as msg.value | K or lenmsg.data | K are compiled as a constant value of 1 when used as ternary...

Eclipse ThreadX numeric error vulnerability

A security vulnerability exists in Eclipse ThreadX versions 6.0.1 through 6.5.1.202602a. It stems from the failure to validate the addition of a 16-byte private header to objectsize when calling txmmoduleobjectallocate; this results in an overflow of the ULONG value and enables out-of-bounds writ...

GNOME glib numeric error vulnerability

Versions of GNOME Glib prior to 2.88.1 contain a numeric error vulnerability. This vulnerability stems from an error in the gkeyfilegetlocalestringlist function within the gkeyfile.c file, which may lead to a 1-byte out-of-bounds access when loading empty key files, or cause a denial of service i...

Oracle Linux numerical error vulnerability

Oracle Linux is an open and complete operating environment from Oracle Corporation USA that provides virtualization, management and cloud-native computing tools, and operating systems. Oracle Linux suffers from a numeric error vulnerability that stems from integer division by zero in...

Adobe Framemaker Numeric Error Vulnerability (CNVD-2026-19994)

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A numeric error vulnerability exists in Adobe Framemaker, which can be exploited by an attacker to cause arbitrary...

Adobe Framemaker Numeric Error Vulnerability (CNVD-2026-19995)

Adobe Framemaker is a professional desktop publishing software for creating and editing large technical documents. A numeric error vulnerability exists in Adobe Framemaker, which can be exploited by an attacker to cause arbitrary code to be executed in the current user's environment...

Adobe Bridge Numeric Error Vulnerability

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from a numeric error vulnerability that can be exploited by an attacker to cause a denial of service in the application...

Adobe Bridge numerical error vulnerability

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from a numeric error vulnerability that can be exploited by an attacker to cause a denial of service in the application...

Adobe Framemaker digital error vulnerability

Adobe Framemaker is a professional desktop publishing software for creating and editing large technical documents. A numeric error vulnerability exists in Adobe Framemaker, which can be exploited by an attacker to cause arbitrary code to be executed in the current user's environment...

FreeRDP has a numerical error vulnerability

FreeRDP is an open-source implementation of the Remote Desktop Protocol RDP by the FreeRDP team. Versions of FreeRDP prior to 3.24.0 contained a numerical error vulnerability. This vulnerability occurred when nBlockAlign was set to 0, resulting in a zero overflow error in the MS-ADPCM and IMA-ADP...

Microsoft Excel numerical error vulnerability

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A numeric error vulnerability exists in Microsoft Excel. An attacker could exploit this vulnerability to remotely execute code. The following products and editions are affected: Microsoft Offi...

Microsoft Hyper-V numerical error vulnerability

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. Microsoft Hyper-V has a denial of service vulnerability that can be exploited by attackers to cause a denial of service...