The article dissects CVE‑2026‑21236 in the legacy afd.sys driver, showing how an integer‑overflow in AfdBind lets attackers obtain a raw device handle, bypass KASLR, manipulate kernel structures like EPROCESS and KTHREAD, and silently elevate a process to SYSTEM privileges.
A curious geek ran the classic 1993 FPS DOOM continuously on an outdated handheld for two and a half years, discovering that the game’s 32‑bit timer eventually overflows and crashes, highlighting how long‑running client software can hit hidden integer overflow bugs.
Unlike fixed‑size integers in languages like C or Java, Python uses arbitrary‑precision integers that automatically expand, preventing overflow; this article explains the underlying CPython implementation, demonstrates the behavior with examples, and discusses the memory and performance trade‑offs of such limitless integers.
This article reveals thirteen subtle Go programming mistakes—from octal literals and integer overflow to floating‑point comparison, slice length vs. capacity, map initialization, and value copying—providing clear explanations, real‑world analogies, and concrete best‑practice code fixes to prevent bugs and performance issues.
The 1996 Ariane 5 launch failed and exploded due to a single line of legacy code that caused a 64‑bit floating‑point to 16‑bit signed integer conversion overflow in the guidance system, highlighting the dangers of unchecked code reuse, inadequate error handling, and insufficient testing in critical software.
This article explains the difference between unsigned and signed integer overflow in C, shows how overflow can lead to buffer overflows and security breaches, illustrates common pitfalls with code examples, discusses compiler optimizations that remove overflow checks, and provides reliable techniques for detecting and preventing integer overflow.
MySQL 8.0.28 and earlier can deadlock in multi‑threaded slave replication when the internal commit sequence counter overflows after 2³¹ transactions, causing workers to stop waking and the replica to hang; the article explains the underlying slave_preserve_commit_order mechanism, the overflow bug, and a step‑by‑step reproduction method.
Git released maintenance versions fixing critical security issues CVE-2022-41903 and CVE-2022-23521, which stem from integer overflows in the pretty formatting code and gitattributes parsing, potentially allowing arbitrary heap reads/writes and remote code execution via crafted git log formats or malicious .gitattributes files.
The article explains how a signed‑to‑unsigned integer overflow in IIS’s Read function bypasses size checks, leading to a zero‑length read that triggers the CVE‑2015‑1635 vulnerability in HTTP.sys, allowing attackers to crash the server with crafted Range requests.
This article explains the concept of absolute value, demonstrates Java's Math.abs overloads for different primitive types, illustrates a common hashing use‑case that can fail when Integer.MIN_VALUE is processed, and shows how casting to long resolves the overflow problem.
This article explains how attackers gain kernel-level privileges by exploiting vulnerabilities such as null-pointer dereferences, use-after-free, and integer overflow bugs, outlines the four legitimate ways programs enter kernel mode, and reviews real-world CVE cases and modern mitigation techniques.
This article explains how to use Java's Math class methods such as addExact, subtractExact, and multiplyExact to detect integer overflow, provides the source code for each operation, discusses differences between int and long handling, and offers tips for performance‑aware usage.
The article explains how JavaScript interprets JSON values without quotation marks as numbers, demonstrates the difference between numeric and string representations of the same value, and warns that large numeric literals may overflow a 32‑bit integer during internal conversion.
