The weakness exists due to incorrect substracting of value both in signed and unsigned cases. The final result of deducting is less than the minimum allowable integer value. Such results can cause problems with work of application and therefore crashes of other part of the system. Low value connected with data may lead to buffer overflow, arbitrary code execution and further memory corruption.
The vulnerability is introduced during Implementation stage.
Latest vulnerabilities for CWE-191
Description of CWE-191 on Mitre website