Weaknesses of type CWE-190

1,660 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2017-15873MEDIUMThe get_next_block function in archival/libarchive/decompress_bunzip2.c in BusyBox 1.27.2 has an Integer Overflow that may lead to a write aEPSS 1.3%CVE-2024-34403MEDIUMAn issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.EPSS 1.3%CVE-2019-9139HIGHDaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed PDF file that is misEPSS 1.3%CVE-2019-9137HIGHDaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed Image file that is mEPSS 1.3%CVE-2019-9138HIGHDaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed PhotoShop file that EPSS 1.3%CVE-2024-22860CRITICALInteger overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxl_anim_read_packet compEPSS 1.3%CVE-2023-41175MEDIUMLibtiff: potential integer overflow in raw2tiff.cEPSS 1.3%CVE-2023-24909HIGHMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityEPSS 1.3%CVE-2026-21385HIGHInteger Overflow or Wraparound in GraphicsEPSS 1.3%KEVCVE-2020-1634HIGHJunos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset.EPSS 1.3%CVE-2020-11039HIGHInteger Overflow in FreeRDPEPSS 1.3%CVE-2025-54472HIGHApache bRPC: Redis Parser Remote Denial of ServiceEPSS 1.3%CVE-2019-2392MEDIUM$mod can result in undefined behaviorEPSS 1.3%CVE-2023-5849HIGHInteger overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit heap corruption via a crafEPSS 1.3%CVE-2022-27641HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.9EPSS 1.2%CVE-2024-34402HIGHAn issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with aEPSS 1.2%CVE-2022-1036MEDIUMAble to create an account with long password leads to memory corruption / Integer Overflow in microweber/microweberEPSS 1.2%CVE-2023-36792HIGHVisual Studio Remote Code Execution VulnerabilityEPSS 1.2%CVE-2012-1867HIGHInteger overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, WEPSS 1.2%CVE-2023-22895HIGHThe bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in memEPSS 1.2%