Weaknesses of type CWE-190

1,660 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2020-27754—In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed values to the caller whEPSS 1.1%CVE-2020-27758—A flaw was found in ImageMagick in coders/txt.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefEPSS 1.1%CVE-2020-27767—A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could triggEPSS 1.1%CVE-2020-27772—A flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefEPSS 1.1%CVE-2020-27774—A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could triEPSS 1.1%CVE-2020-27775—A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could triggEPSS 1.1%CVE-2021-32714MEDIUMInteger Overflow in Chunked Transfer-EncodingEPSS 1.1%CVE-2026-28214MEDIUMFirebird server hangs when using specific clumplet on batch creationEPSS 1.1%CVE-2024-45491HIGHAn issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (wEPSS 1.1%CVE-2023-28831HIGHThe OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application EPSS 1.1%CVE-2020-27751—A flaw was found in ImageMagick in MagickCore/quantum-export.c. An attacker who submits a crafted file that is processed by ImageMagick coulEPSS 1.1%CVE-2024-22396MEDIUMAn Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of SEPSS 1.1%CVE-2024-23775HIGHInteger Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows attackers to cause a denial of service (DoS) via mEPSS 1.1%CVE-2022-24667—A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HPACK-encoEPSS 1.1%CVE-2026-48095HIGHGHSL-2026-140_7-Zip: 7-Zip has a heap buffer overflow via NTFS compressed stream buffer under-allocationEPSS 1.1%CVE-2024-27304CRITICALpgx SQL Injection via Protocol Message Size OverflowEPSS 1.1%CVE-2024-46483CRITICALXlight FTP Server <3.9.4.3 has an integer overflow vulnerability in the packet parsing logic of the SFTP server, which can lead to a heap ovEPSS 1.1%CVE-2022-23567MEDIUMInteger overflows in TensorflowEPSS 1.1%CVE-2021-22684—Tizen RT RTOS version 3.0.GBB is vulnerable to integer wrap-around in functions_calloc and mm_zalloc. This improper memory assignment can leEPSS 1.1%CVE-2020-27762—A flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefEPSS 1.1%