Wrap-around Error
CWE-128
Wrap around errors occur whenever a value is incremented past the maximum value for its type and therefore wraps around to a very small, negative, or undefined value.
We track 2 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.2.
How this weakness is prevented
- Requirements specification: The choice could be made to use a language that is not susceptible to these issues.
- Architecture and Design: Provide clear upper and lower bounds on the scale of any protocols designed.
- Implementation: Perform validation on all incremented variables to ensure that they remain within reasonable bounds.
Latest Wrap-around Error vulnerabilities
- 8.8 High severity
Intel(R) Ethernet Network Controllers and…: Incorrect Calculation
Wrap-around error in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
- 7.5 High severity
Ivanti Connect Secure (ICS), Ivanti Policy…: Incorrect Calculation
An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4, Ivanti Policy Secure (IPS) in versions prior to 9.1R17 and 22.3R1, and Ivanti Neuron