Weaknesses of type CWE-190

1,661 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2022-22721—core: Possible buffer overflow with very large or unlimited LimitXMLRequestBodyEPSS 41.7%CVE-2011-1823HIGHThe vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows EPSS 41.4%KEVCVE-2015-5621HIGHThe snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list itemEPSS 40.9%CVE-2011-2013CRITICALInteger overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold anEPSS 33.7%CVE-2024-38144HIGHKernel Streaming WOW Thunk Service Driver Elevation of Privilege VulnerabilityEPSS 32.3%CVE-2022-1812HIGHInteger Overflow or Wraparound in publify/publifyEPSS 30.8%CVE-2011-0663HIGHMultiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attaEPSS 26.2%CVE-2022-0185HIGHA heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux EPSS 25.2%KEVCVE-2023-24949HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 24.6%CVE-2020-8844HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.25114. User interactionEPSS 23.7%CVE-2025-5473HIGHGIMP ICO File Parsing Integer Overflow Remote Code Execution VulnerabilityEPSS 23.5%CVE-2010-1883HIGHInteger overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 EPSS 23.3%CVE-2022-40303HIGHAn issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, EPSS 23.0%CVE-2026-47291CRITICALHTTP.sys Remote Code Execution VulnerabilityEPSS 22.8%CVE-2012-5054HIGHInteger overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execEPSS 21.2%KEVCVE-2016-1010HIGHInteger overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577EPSS 19.3%KEVCVE-2025-2760HIGHGIMP XWD File Parsing Integer Overflow Remote Code Execution VulnerabilityEPSS 18.8%CVE-2023-6345CRITICALInteger overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to poteEPSS 16.5%KEVCVE-2024-1305CRITICALtap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can useEPSS 15.4%CVE-2007-1383CRITICALInteger overflow in the 16 bit variable reference counter in PHP 4 allows context-dependent attackers to execute arbitrary code by overflowiEPSS 15.2%