CWE-197— Numeric Truncation Error
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.— MITRE CWE catalog
82 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-197page 1 of 2
- CVE-2022-42475CRITICALCVSS 9.8EG 9.8⚠ KEV2023-01-02
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlie…
- CVE-2024-43639CRITICALCVSS 9.8EG 9.82024-11-12
Windows KDC Proxy Remote Code Execution Vulnerability
- CVE-2025-6965CRITICALCVSS 7.7EG 9.82025-07-15
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
- CVE-2026-87529CRITICALCVSS 9.6EG 9.62026-09-09
Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
- CVE-2020-15202CRITICALCVSS 9.0EG 9.02020-09-25
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `Shard` API in TensorFlow expects the last argument to be a function taking two `int64` (i.e., `long long`) arguments. However, there are several places in TensorFlow…
- CVE-2026-78512HIGHCVSS 8.8EG 8.82026-09-08
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- CVE-2026-69512HIGHCVSS 8.8EG 8.82026-09-08
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
- CVE-2024-49018HIGHCVSS 8.8EG 8.82024-11-12
SQL Server Native Client Remote Code Execution Vulnerability
- CVE-2024-43519HIGHCVSS 8.8EG 8.82024-10-08
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2024-30009HIGHCVSS 8.8EG 8.82024-05-14
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2023-32143HIGHCVSS 8.8EG 8.82024-05-03
D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentica…
- CVE-2024-28944HIGHCVSS 8.8EG 8.82024-04-09
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2024-21451HIGHCVSS 8.8EG 8.82024-03-12
Microsoft ODBC Driver Remote Code Execution Vulnerability
- CVE-2024-21440HIGHCVSS 8.8EG 8.82024-03-12
Microsoft ODBC Driver Remote Code Execution Vulnerability
- CVE-2024-21391HIGHCVSS 8.8EG 8.82024-02-13
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2024-21352HIGHCVSS 8.8EG 8.82024-02-13
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2024-29050HIGHCVSS 8.4EG 8.42024-04-09
Windows Cryptographic Services Remote Code Execution Vulnerability
- CVE-2026-68880HIGHCVSS 8.0EG 8.02026-09-08
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69535HIGHCVSS 7.8EG 7.82026-09-08
Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
- CVE-2026-69822HIGHCVSS 7.8EG 7.82026-09-08
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.
- CVE-2026-68804HIGHCVSS 7.8EG 7.82026-08-11
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2026-63525HIGHCVSS 7.8EG 7.82026-08-11
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- CVE-2026-62698HIGHCVSS 7.8EG 7.82026-08-11
Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.
- CVE-2026-62739HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
- CVE-2026-56650HIGHCVSS 7.8EG 7.82026-07-14
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-50357HIGHCVSS 7.8EG 7.82026-07-14
Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
- CVE-2026-50332HIGHCVSS 7.8EG 7.82026-07-14
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-49792HIGHCVSS 7.8EG 7.82026-07-14
Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
- CVE-2026-40409HIGHCVSS 7.8EG 7.82026-06-09
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
- CVE-2026-40404HIGHCVSS 7.8EG 7.82026-06-09
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
- CVE-2026-44823HIGHCVSS 7.8EG 7.82026-06-09
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2025-53723HIGHCVSS 7.8EG 7.82025-08-12
Numeric truncation error in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2025-49679HIGHCVSS 7.8EG 7.82025-07-08
Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally.
- CVE-2024-38125HIGHCVSS 7.8EG 7.82024-08-13
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- CVE-2024-21434HIGHCVSS 7.8EG 7.82024-03-12
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
- CVE-2024-21310HIGHCVSS 7.8EG 7.82024-01-09
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- CVE-2023-36710HIGHCVSS 7.8EG 7.82023-10-10
Windows Media Foundation Core Remote Code Execution Vulnerability
- CVE-2023-35328HIGHCVSS 7.8EG 7.82023-07-11
Windows Transaction Manager Elevation of Privilege Vulnerability
- CVE-2022-34670HIGHCVSS 7.8EG 7.82022-12-30
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors when casting a primitive to a primitive of smaller size causes data to be lost in…
- CVE-2022-34676HIGHCVSS 7.1EG 7.82022-12-30
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read may lead to denial of service, information disclosure, or data tampering.
- CVE-2026-96280HIGHCVSS 7.5EG 7.52026-09-27
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize (32 bits on 32-bit systems), causing undersized allocations while subsequent operations use the original 64-bit size, le…
- CVE-2026-19667HIGHCVSS 7.5EG 7.52026-09-16
If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in `named` results in a negative cache entry of 0 bytes. When this entry is subsequently read, `named` aborts. This issue…
- CVE-2026-73523HIGHCVSS 7.5EG 7.52026-08-17
COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-listener.c that allows unauthenticated remote attackers to cause the CAN listener to transmit process stack memory onto the CAN bus by sending a rejected…
- CVE-2026-6679HIGHCVSS 7.5EG 7.52026-06-25
A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an…
- CVE-2026-42944HIGHCVSS 7.5EG 7.52026-05-20
NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when encoding multiple NSID and/or DNS Cookie EDNS and/or EDNS Padding options in the reply packet. The relevant options ('nsid'…
- CVE-2024-30029HIGHCVSS 7.5EG 7.52024-05-14
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2024-30024HIGHCVSS 7.5EG 7.52024-05-14
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2024-30023HIGHCVSS 7.5EG 7.52024-05-14
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2024-30022HIGHCVSS 7.5EG 7.52024-05-14
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2024-30015HIGHCVSS 7.5EG 7.52024-05-14
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Map vulnerabilities like CWE-197 to your infrastructure
EchelonGraph correlates every CVE — across CWE-197 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →