CWE-1077Variant

Floating Point Comparison with Incorrect Operator

Incomplete in the CWE catalog · 5 CVEs mapped

5
CVEs mapped
6.2
Median CVSS
What it is

The code performs a comparison such as an

equality test between two float (floating point) values, but

it uses comparison operators that do not account for the

possibility of loss of precision.

Recent examples
5.3cvss
CVE-2022-4996

CVE-2022-4996 - MEDIUM Severity Vulnerability

A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing a manipulation can lead to floating point comparison with incorrect operator. It is possible to launch the attack remotely. The exploit has been published and may be used. It is best practice to apply a patch to resolve this issue.

MEDIUMno explanation yet
0%
epss
4.0cvss
CVE-2023-4720

Floating Point Comparison with Incorrect Operator in gpac/gpac

Floating Point Comparison with Incorrect Operator in GitHub repository gpac/gpac prior to 2.3-DEV.

MEDIUMno explanation yet
0%
epss
6.2cvss
CVE-2023-32627

Floating point exception in src/voc.c

A floating point exception vulnerability was found in sox, in the read_samples function at sox/src/voc.c:334:18. This flaw can lead to a denial of service.

MEDIUMno explanation yet
0%
epss
The record
Technical detail
CWE ID
CWE-1077
Abstraction
Variant
Structure
Simple
Status
Incomplete
References (2)