CWE-191

668 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 3 of them as exploited in the wild.

Critical 73High 367Medium 205Low 23Not scored 0

CVEs per yearBy the year they were published

CVE-2014-0497
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on…
Product not named
ExploitedHigh8.8
CVE-2022-0185
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the…
kernel
ExploitedHigh8.4
CVE-2021-31956
Windows NTFS Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1809
ExploitedHigh7.8

CVE-2026-121727
Kore before 4.3.0 Integer Underflow Memory Exhaustion via http_header_recv()
jorisvink · kore
High8.7
CVE-2026-61497
TinyUSB < 0.20.1 Integer Underflow via HID Report Descriptor Parser
hathach · TinyUSB
Medium5.2
CVE-2026-120060
psqlODBC does not validate server-supplied counts and lengths
PostgreSQL · psqlODBC
Medium5.9
CVE-2026-120058
psqlODBC row cache overflow when a later FETCH changes the column count
PostgreSQL · psqlODBC
High7.5
CVE-2026-20576
In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…
MediaTek, Inc. · MediaTek chipset
Medium6.7
CVE-2026-20572
In adsp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already…
MediaTek, Inc. · MediaTek chipset
Medium6.7
CVE-2026-111735
Integer underflow leads to out-of-bounds read in pf_cpm_c_data_ind()
RT-Labs · P-Net
High7.1
CVE-2026-103411
Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsing
Juniper Networks · Session Smart Router
High7.1
CVE-2026-112625
An integer underflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…
Apple · iOS and iPadOS
High7.5
CVE-2026-82947
Multiple Out-of-Bounds Reads in Frame Processing
RT-Labs AB · SOEM
High7.1