CWE-191 Integer Underflow Vulnerability Analysis with C POC

Vulnerability Overview Vulnerability Name: CWE-191: Integer Underflow (Wrap or Wraparound) Description: This vulnerability occurs when subtracting one integer from another, resulting in a value smaller than the minimum allowed integer value, which produces an incorrect result. This situation can occur in both signed and unsigned integers. Impact Scope DoS (Denial of Service): May cause the program to crash, exit, or restart. Resource Consumption (CPU): May lead to infinite loops, increasing CPU resource consumption. Resource Consumption (Memory): May lead to increased memory consumption. Data Corruption: If the affected data is critical for data integrity (rather than process logic), it may cause simple data corruption. Execution of Unauthorized Code/Commands: In certain cases, it may lead to buffer overflows, enabling the execution of arbitrary code. Remediation Static Analysis: Use automatic static analysis tools (such as SAST) to detect potential integer underflow issues. Code Review: Carefully review code to ensure that underflows do not occur during integer operations. Input Validation: Strictly validate user input to prevent malicious inputs from causing integer underflows. POC Code Example Code Related Vulnerabilities CVE-2004-0816: Integer underflow via malformed packets in firewalls. CVE-2004-1002: Integer underflow via packets with invalid lengths. CVE-2005-0199: Long inputs leading to incorrect length calculations. CVE-2005-1891: Malformed icons causing integer underflow in loop counter variables. References [REF-44] Michael Howard, David LeBlanc and John Viega. "24 Deadly Sins of Software Security". "Sin 7: Integer Overflows". Page 119. McGraw-Hill. 2010.

Goal Reached Thanks to every supporter — we hit 100%!

CWE-191 Integer Underflow Vulnerability Analysis with C POC