Weaknesses of type CWE-190

1,660 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2020-27768—In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affeEPSS 1.4%CVE-2023-40745MEDIUMLibtiff: integer overflow in tiffcp.cEPSS 1.4%CVE-2023-47212CRITICALA heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22. A specially crafted .ogg file can leaEPSS 1.4%CVE-2022-32546—A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, whenEPSS 1.4%CVE-2023-38104HIGHGStreamer RealMedia File Parsing Integer Overflow Remote Code Execution VulnerabilityEPSS 1.4%CVE-2022-32545—A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, whenEPSS 1.4%CVE-2020-13546HIGHIn SoftMaker Software GmbH SoftMaker Office TextMaker 2021 (revision 1014), a specially crafted document can cause the document parser to miEPSS 1.4%CVE-2025-54106HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 1.4%CVE-2024-45492HIGHAn issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platEPSS 1.4%CVE-2021-22675—The affected product is vulnerable to integer overflow while parsing malformed over-the-air firmware update files, which may allow an attackEPSS 1.4%CVE-2023-28277MEDIUMWindows DNS Server Information Disclosure VulnerabilityEPSS 1.4%CVE-2025-50166MEDIUMWindows Distributed Transaction Coordinator (MSDTC) Information Disclosure VulnerabilityEPSS 1.4%CVE-2024-47606HIGHGHSL-2024-166: GStreamer Integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writesEPSS 1.4%CVE-2023-40186MEDIUMIntegerOverflow leading to Out-Of-Bound Write Vulnerability in FreeRDPEPSS 1.4%CVE-2026-7828MEDIUMUltraVNC repeater integer overflow in win_log malloc leading to heap overflowEPSS 1.4%CVE-2024-21836HIGHA heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17. A speciallEPSS 1.3%CVE-2024-23605HIGHA heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2e17. A specially craEPSS 1.3%CVE-2024-21825HIGHA heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp CoEPSS 1.3%CVE-2024-23496HIGHA heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17. A specially EPSS 1.3%CVE-2022-29219HIGHInteger Overflow in LodestarEPSS 1.3%