Weaknesses of type CWE-190

1,658 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2021-22679—The affected product is vulnerable to an integer overflow while processing HTTP headers, which may allow an attacker to remotely execute codEPSS 1.8%CVE-2021-22671—Multiple integer overflow issues exist while processing long domain names, which may allow an attacker to remotely execute code on the SimplEPSS 1.8%CVE-2016-9601MEDIUMghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2_decode_gray_scale_imagEPSS 1.7%CVE-2024-21420HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.7%CVE-2021-27419HIGHuClibc-ng Integer Overflow or WraparoundEPSS 1.7%CVE-2024-21379HIGHMicrosoft Word Remote Code Execution VulnerabilityEPSS 1.7%CVE-2024-32655HIGHNpgsql Vulnerable to SQL Injection via Protocol Message Size OverflowEPSS 1.7%CVE-2025-48595HIGHIn multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of EPSS 1.7%KEVCVE-2023-34453MEDIUMsnappy-java's Integer Overflow vulnerability in shuffle leads to DoSEPSS 1.7%CVE-2025-47987HIGHCredential Security Support Provider Protocol (CredSSP) Elevation of Privilege VulnerabilityEPSS 1.7%CVE-2023-36911CRITICALMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityEPSS 1.7%CVE-2023-37327HIGHGStreamer FLAC File Parsing Integer Overflow Remote Code Execution VulnerabilityEPSS 1.7%CVE-2022-43974HIGHMatrixSSL 4.0.4 through 4.5.1 has an integer overflow in matrixSslDecodeTls13. A remote attacker might be able to send a crafted TLS MessageEPSS 1.7%CVE-2024-45490CRITICALAn issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.EPSS 1.7%CVE-2025-21244HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.7%CVE-2025-21243HIGHWindows Telephony Service Remote Code Execution VulnerabilityEPSS 1.7%CVE-2016-6328MEDIUMA vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-ServEPSS 1.7%CVE-2024-37336HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.7%CVE-2021-27427HIGHRIOT OS Integer Overflow or WraparoundEPSS 1.7%CVE-2021-27425HIGHCesanta Software Mongoose-OS Integer Overflow or WraparoundEPSS 1.7%