CWE-680Integer Overflow to Buffer Overflow

Abstraction: Compound · CVEs in our corpus: 108

The product performs a calculation to determine how much memory to allocate, but an integer overflow can occur that causes less memory to be allocated than expected, leading to a buffer overflow.

Last updated: 21 August 2026 00:24 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 5 mapping(s) from 1 framework(s): CAPEC 5 (partial)

See the full cumulative-coverage rollup →

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.PS-06
SA-11 Developer Testing and Evaluation
SI-10 Information Input Validation
SA-8 Security and Privacy Engineering Principles

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

—

Validate

Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2021-40417`	8.4	9.8	0.1568	2021-12-22
`CVE-2018-8786`	8.1	9.8	0.0816	2018-11-29
`CVE-2018-8787`	8.1	9.8	0.0836	2018-11-29
`CVE-2018-8795`	8.1	9.8	0.0740	2019-02-05
`CVE-2018-8794`	8.0	9.8	0.0666	2019-02-05
`CVE-2020-13576`	8.0	9.8	0.0586	2021-02-10
`CVE-2021-21783`	7.9	9.8	0.0498	2021-03-25
`CVE-2021-21832`	7.5	9.8	0.0115	2021-08-17
`CVE-2022-35289`	7.5	9.8	0.0096	2022-10-11
`CVE-2024-33078`	7.5	9.8	0.0107	2024-05-01
`CVE-2020-6116`	7.4	7.8	0.2842	2020-09-17
`CVE-2025-54952`	7.4	9.8	0.0059	2025-08-08
`CVE-2021-32761`	7.3	7.5	0.3105	2021-07-21
`CVE-2026-8376`	7.3	9.8	0.0044	2026-05-26
`CVE-2019-5087`	7.1	8.8	0.0364	2019-11-21
`CVE-2022-24834`	7.1	7.0	0.4141	2023-07-13
`CVE-2019-5086`	7.0	8.8	0.0315	2019-11-21
`CVE-2020-10929`	6.9	8.8	0.0192	2020-07-28
`CVE-2021-21859`	6.9	8.8	0.0160	2021-08-16
`CVE-2021-21860`	6.9	8.8	0.0163	2021-08-16
`CVE-2021-21861`	6.9	8.8	0.0163	2021-08-16
`CVE-2021-21837`	6.9	8.8	0.0201	2021-08-18
`CVE-2021-21838`	6.9	8.8	0.0201	2021-08-18
`CVE-2021-21839`	6.9	8.8	0.0201	2021-08-18
`CVE-2021-21843`	6.9	8.8	0.0202	2021-08-18