Integer Overflow or Wraparound · Common Weaknesses

The chart below shows the most common weaknesses found in vulnerabilities across the Erlang ecosystem. Understanding which weakness types recur most often helps library authors and application developers focus their security efforts where they matter most.

Each CVE is mapped to its CWE (Common Weakness Enumeration) using the MITRE CWE hierarchy. A slice's count includes every CVE reachable anywhere below it in the hierarchy, not just CVEs assigned that exact CWE — click a slice or legend row to drill into its direct children and see the same breakdown one level down.

Integer Overflow or Wraparound CWE-190 CWE-190 at MITRE

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Integer Overflow to Buffer Overflow CWE-680 0 (0.0%)

Classified as CWE-190 itself, not a child weakness 2

CVEs

CVEs for Integer Overflow or Wraparound CWE-190

Summary	Publication	CVE ID	Published
A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer	Erlang pkg:otp/erts GitHub / erlang/otp	CVE-2026-75538	2026-09-01
Ash.Vector wraps the 16-bit dimension header for vectors over 65,535 elements, corrupting data and crashing reads	Hex / ash GitHub / ash-project/ash	CVE-2026-82737	2026-09-01

2 CVEs