DerScanner
Home / Vulnerability Database / C or C++ : Signed integer overflow
C/C++

C or C++ : Signed integer overflow

Classification

OWASP ASVS
Validation, Sanitization and Encoding
CWE
CWE-190
CWE/SANS Top 25 2011
CWE-190
CWE/SANS Top 25 2021
CWE-190

Overview

Signed integer overflow.

Unlike unsigned integer overflow, signed integer overflow is undefined behavior.

References

  1. Basics of Integer Overflow
  2. CWE-190: Integer Overflow or Wraparound
MEDIUM

DerScanner Severity Score

Do you want to fix C or C++ : Signed integer overflow in your application?

See also

C/C++

C or C++ : Dead store

C/C++

C or C++ : Use after free

C/C++

C or C++ : va_list uninitialized