CWE-680— Integer Overflow to Buffer Overflow
The product performs a calculation to determine how much memory to allocate, but an integer overflow can occur that causes less memory to be allocated than expected, leading to a buffer overflow.— MITRE CWE catalog
106 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-680page 3 of 3
- CVE-2025-54623MEDIUMCVSS 6.3EG 6.32025-08-06
Out-of-bounds read vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2025-54952CRITICALCVSS 9.8EG 9.82025-08-08
An integer overflow vulnerability in the loading of ExecuTorch models can cause smaller-than-expected memory regions to be allocated, potentially resulting in code execution or other undesirable effects. This issue affects ExecuTorch prior…
- CVE-2026-24928MEDIUMCVSS 5.8EG 5.82026-02-06
Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2026-25541HIGHCVSS 7.5EG 7.52026-02-04
Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique reclaim path of BytesMut::reserve, if the condition "v_capacity >= new_cap …
- CVE-2026-55200HIGHCVSS 8.3EG 8.12026-06-17
libssh2 through 1.11.1, fixed in commit 7acf3df contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field. Remote attackers can send crafted SSH packets with excessivel…
- CVE-2026-8376CRITICALCVSS 9.8EG 9.82026-05-25
Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds. Perl_study_chunk in regcomp_study.c checked the size of the joined substring buffer in characters …
Map vulnerabilities like CWE-680 to your infrastructure
EchelonGraph correlates every CVE — across CWE-680 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Start Free Scan →