
CVE-2022-36008 – Message length overflow in frontier
https://notcve.org/view.php?id=CVE-2022-36008
19 Aug 2022 — Frontier is Substrate's Ethereum compatibility layer. A security issue was discovered affecting parsing of the RPC result of the exit reason in case of EVM reversion. In release build, this would cause the exit reason being incorrectly parsed and returned by RPC. In debug build, this would cause an overflow panic. No action is needed unless you have a bridge node that needs to distinguish different reversion exit reasons and you used RPC for this. • https://github.com/paritytech/frontier/commit/fff8cc43b7756ce3979a38fc473f38e6e24ac451 • CWE-190: Integer Overflow or Wraparound •

CVE-2022-2625 – postgresql: Extension scripts replace objects not belonging to the extension.
https://notcve.org/view.php?id=CVE-2022-2625
18 Aug 2022 — Issues addressed include integer overflow and remote SQL injection vulnerabilities. • https://bugzilla.redhat.com/show_bug.cgi?id=2113825 • CWE-915: Improperly Controlled Modification of Dynamically-Determined Object Attributes CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') •

CVE-2022-2335 – Softing Secure Integration Server Integer Underflow
https://notcve.org/view.php?id=CVE-2022-2335
17 Aug 2022 — The issue results from the lack of proper validation of user-supplied data, which can result in an integer underflow before writing to memory. • https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-4.html • CWE-191: Integer Underflow (Wrap or Wraparound) •

CVE-2022-2867 – libtiff: uint32_t underflow leads to out of bounds read and write in tiffcrop.c
https://notcve.org/view.php?id=CVE-2022-2867
17 Aug 2022 — libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. ... A flaw was found in libtiff's tiffcrop utility that has a uint32_t underflow that can lead to an out-of-bounds read and write. • https://bugzilla.redhat.com/show_bug.cgi?id=2118847 • CWE-125: Out-of-bounds Read CWE-191: Integer Underflow (Wrap or Wraparound) CWE-787: Out-of-bounds Write •

CVE-2022-2869 – libtiff: tiffcrop.c has uint32_t underflow which leads to out of bounds read and write in extractContigSamples8bits()
https://notcve.org/view.php?id=CVE-2022-2869
17 Aug 2022 — libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. ... A flaw was found in libtiff's tiffcrop tool that has a uint32_t underflow, which leads to an out-of-bounds read and write in the extractContigSamples8bits routine. • https://bugzilla.redhat.com/show_bug.cgi?id=2118869 • CWE-125: Out-of-bounds Read CWE-191: Integer Underflow (Wrap or Wraparound) CWE-787: Out-of-bounds Write •

CVE-2022-2831
https://notcve.org/view.php?id=CVE-2022-2831
16 Aug 2022 — A flaw was found in Blender 3.3.0. An interger overflow in source/blender/blendthumb/src/blendthumb_extract.cc may lead to program crash or memory corruption. Se ha encontrado un fallo en Blender 3.3.0. Un desbordamiento de interger en source/blender/blendthumb/src/blendthumb_extract.cc puede llevar a la caída del programa o a la corrupción de la memoria • https://developer.blender.org/T99705 • CWE-125: Out-of-bounds Read CWE-190: Integer Overflow or Wraparound CWE-787: Out-of-bounds Write •

CVE-2022-38216
https://notcve.org/view.php?id=CVE-2022-38216
16 Aug 2022 — An integer overflow exists in Mapbox's closed source gl-native library prior to version 10.6.1, which is bundled with multiple Mapbox products including open source libraries. • https://github.com/mapbox/mapbox-maps-android/releases/tag/android-v10.6.1 • CWE-190: Integer Overflow or Wraparound •

CVE-2022-20362
https://notcve.org/view.php?id=CVE-2022-20362
11 Aug 2022 — In Bluetooth, there is a possible out of bounds write due to an integer overflow. • https://source.android.com/security/bulletin/android-13 • CWE-190: Integer Overflow or Wraparound •

CVE-2022-20283
https://notcve.org/view.php?id=CVE-2022-20283
11 Aug 2022 — In Bluetooth, there is a possible out of bounds write due to an integer overflow. • https://source.android.com/security/bulletin/android-13 • CWE-190: Integer Overflow or Wraparound •

CVE-2022-20383
https://notcve.org/view.php?id=CVE-2022-20383
11 Aug 2022 — In AllocateInternalBuffers of g3aa_buffer_allocator.cc, there is a possible out of bounds write due to an integer overflow. • https://source.android.com/security/bulletin/pixel/2022-08-01 • CWE-190: Integer Overflow or Wraparound •