Weaknesses of type CWE-190

1,657 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2024-20654HIGHMicrosoft ODBC Driver Remote Code Execution VulnerabilityEPSS 2.0%CVE-2021-32027—A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SEPSS 2.0%CVE-2023-29369MEDIUMRemote Procedure Call Runtime Denial of Service VulnerabilityEPSS 2.0%CVE-2021-36058MEDIUMXMP Toolkit SDK Integer Overflow Vulnerability Could Result In Application Denial Of ServiceEPSS 2.0%CVE-2019-5089HIGHAn exploitable memory corruption vulnerability exists in Investintech Able2Extract Professional 4.0.7 x64. A specially crafted JPEG file canEPSS 2.0%CVE-2024-21444HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.9%CVE-2024-21441HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.9%CVE-2023-0179—A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack aEPSS 1.9%CVE-2018-1124HIGHprocps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allowEPSS 1.9%CVE-2023-36401HIGHMicrosoft Remote Registry Service Remote Code Execution VulnerabilityEPSS 1.9%CVE-2021-20304—A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, EPSS 1.9%CVE-2020-35523—An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to inject and execute arbEPSS 1.9%CVE-2018-1126MEDIUMprocps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues. ThEPSS 1.9%CVE-2016-9583MEDIUMAn out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input.EPSS 1.9%CVE-2025-49683HIGHMicrosoft Virtual Hard Disk Remote Code Execution VulnerabilityEPSS 1.9%CVE-2026-32759MEDIUMFile Browser TUS Negative Upload-Length Fires Post-Upload Hooks PrematurelyEPSS 1.9%CVE-2018-11574CRITICALImproper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information diEPSS 1.9%CVE-2023-35381HIGHWindows Fax Service Remote Code Execution VulnerabilityEPSS 1.9%CVE-2013-7353MEDIUMInteger overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers EPSS 1.9%CVE-2019-9133HIGHKMPlayer Subtitles parser Heap Overflow VulnerabilityEPSS 1.9%