Weaknesses of type CWE-190

1,660 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2022-44638HIGHIn libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integeEPSS 1.5%CVE-2022-36125HIGHInteger overflow when reading corrupted .avro file in Avro Rust SDKEPSS 1.5%CVE-2022-32775CRITICALAn integer overflow vulnerability exists in the web interface /action/ipcamRecordPost functionality of Abode Systems, Inc. iota All-In-One SEPSS 1.5%CVE-2015-5297MEDIUMAn integer overflow issue has been reported in the general_composite_rect() function in pixman prior to version 0.32.8. An attacker could exEPSS 1.5%CVE-2020-25693—A flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer overflows in load_pnm() can be triggered by a EPSS 1.5%CVE-2024-21350HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.5%CVE-2022-24963CRITICALApache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functionsEPSS 1.5%CVE-2023-34454MEDIUMsnappy-java's Integer Overflow vulnerability in compress leads to DoSEPSS 1.5%CVE-2023-24863MEDIUMMicrosoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityEPSS 1.5%CVE-2023-24906MEDIUMMicrosoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityEPSS 1.5%CVE-2021-21807CRITICALAn integer overflow vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.9. A specially crafted maEPSS 1.5%CVE-2024-22051CRITICALCommonMarker Integer Overflow VulnerabilityEPSS 1.5%CVE-2022-20685HIGHMultiple Cisco Products Snort Modbus Denial of Service VulnerabilityEPSS 1.4%CVE-2020-7881HIGHAfreecaTV streamer service stack-based buffer overflowEPSS 1.4%CVE-2022-24845HIGHInteger bounds error in VyperEPSS 1.4%CVE-2022-0913CRITICALInteger Overflow or Wraparound in microweber/microweberEPSS 1.4%CVE-2022-2285HIGHInteger Overflow or Wraparound in vim/vimEPSS 1.4%CVE-2023-28501CRITICALHeap buffer overflow in unirpcdEPSS 1.4%CVE-2022-25147—Apache Portable Runtime Utility (APR-util): out-of-bounds writes in the apr_base64 family of functionsEPSS 1.4%CVE-2023-24537HIGHInfinite loop in parsing in go/scannerEPSS 1.4%