CWE · MITRE source
CWE-681Incorrect Conversion between Numeric Types
When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.
Last updated: 09 May 2026 03:25 UTC
NIST 800-53 r5 controls that address this weakness (0)AI
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
| No NIST controls proposed yet. | |||
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2017-7308 | 6.8 | 7.8 | 0.8700 | 2017-03-29 |
CVE-2009-0231 | 5.7 | 8.8 | 0.6498 | 2009-07-15 |
CVE-2016-3074 | 5.2 | 9.8 | 0.5441 | 2016-04-26 |
CVE-2023-23388 | 2.8 | 8.8 | 0.1765 | 2023-03-14 |
CVE-2022-43663 | 2.6 | 8.1 | 0.1681 | 2023-03-20 |
CVE-2018-8786 | 2.5 | 9.8 | 0.0960 | 2018-11-29 |
CVE-2018-1000224 | 2.3 | 7.5 | 0.1316 | 2018-08-20 |
CVE-2023-46848 | 2.1 | 8.6 | 0.0716 | 2023-11-03 |
CVE-2019-14842 | 2.0 | 9.8 | 0.0022 | 2019-11-26 |
CVE-2019-19317 | 2.0 | 9.8 | 0.0098 | 2019-12-05 |
CVE-2020-35926 | 2.0 | 9.8 | 0.0043 | 2020-12-31 |
CVE-2021-38187 | 2.0 | 9.8 | 0.0039 | 2021-08-08 |
CVE-2021-36357 | 2.0 | 9.8 | 0.0020 | 2021-10-22 |
CVE-2022-40138 | 2.0 | 9.8 | 0.0122 | 2022-10-11 |
CVE-2020-6096 | 1.9 | 8.1 | 0.0449 | 2020-04-01 |
CVE-2022-34169 | 1.9 | 7.5 | 0.0666 | 2022-07-19 |
CVE-2022-36025 | 1.9 | 9.1 | 0.0069 | 2022-09-24 |
CVE-2023-24884 | 1.9 | 8.8 | 0.0210 | 2023-04-11 |
CVE-2024-26162 | 1.9 | 8.8 | 0.0225 | 2024-03-12 |
CVE-2020-12417 | 1.8 | 8.8 | 0.0047 | 2020-07-09 |
CVE-2021-27218 | 1.8 | 7.5 | 0.0521 | 2021-02-15 |
CVE-2021-23997 | 1.8 | 8.8 | 0.0020 | 2021-06-24 |
CVE-2021-21860 | 1.8 | 8.8 | 0.0046 | 2021-08-16 |
CVE-2021-21861 | 1.8 | 8.8 | 0.0042 | 2021-08-16 |
CVE-2023-20006 | 1.8 | 8.6 | 0.0068 | 2023-06-28 |