CWE-197— Numeric Truncation Error
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.— MITRE CWE catalog
66 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-197page 2 of 2
- CVE-2026-56650HIGHCVSS 7.8EG 7.82026-07-14
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-6039MEDIUMCVSS 5.4EG 5.42026-06-15
LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken from the file was truncated to a 16-bit value when the point buffer was sized, whil…
- CVE-2026-62698HIGHCVSS 7.8EG 7.82026-08-11
Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.
- CVE-2026-62739HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
- CVE-2026-62769MEDIUMCVSS 6.7EG 6.72026-08-11
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-62881MEDIUMCVSS 6.7EG 6.72026-08-11
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-62883MEDIUMCVSS 6.7EG 6.72026-08-11
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-63525HIGHCVSS 7.8EG 7.82026-08-11
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- CVE-2026-65610LOWCVSS 2.4EG 2.42026-08-19
nnn stores homelen variable as uchar_t, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expr…
- CVE-2026-65795MEDIUMCVSS 6.7EG 6.72026-08-11
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-65797MEDIUMCVSS 6.7EG 6.72026-08-11
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-65798MEDIUMCVSS 6.7EG 6.72026-08-11
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-6679HIGHCVSS 7.5EG 7.52026-06-25
A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an…
- CVE-2026-68804HIGHCVSS 7.8EG 7.82026-08-11
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2026-73523HIGHCVSS 7.5EG 7.52026-08-17
COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-listener.c that allows unauthenticated remote attackers to cause the CAN listener to transmit process stack memory onto the CAN bus by sending a rejected…
- CVE-2026-77014MEDIUMCVSS 5.3EG 5.32026-08-20
A flaw was found in libsoup's SoupServer HTTP Range header processing. The sort_ranges() comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than I…
Map vulnerabilities like CWE-197 to your infrastructure
EchelonGraph correlates every CVE — across CWE-197 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Start Free Scan →