Weaknesses of type CWE-190

1,661 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2026-56647HIGHWindows Remote Access Service Infrastructure Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2026-56194HIGHWindows NFS Server Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2020-16124HIGHInteger overflow in ROS communications libraryEPSS 0.9%CVE-2021-32491—A flaw was found in djvulibre-3.5.28 and earlier. An integer overflow in function render() in tools/ddjvu via crafted djvu file may lead to EPSS 0.9%CVE-2026-25172HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 0.9%CVE-2024-2452HIGHInteger wraparound, under-allocation, and heap buffer overflow in Eclipse ThreadX NetX Duo __portable_aligned_alloc()EPSS 0.9%CVE-2023-25155MEDIUMInteger Overflow in several Redis commands can lead to denial of service.EPSS 0.9%CVE-2025-47998HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 0.9%CVE-2022-23587HIGHInteger overflow in TensorflowEPSS 0.9%CVE-2024-30004MEDIUMWindows Mobile Broadband Driver Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-33107HIGHInteger Overflow or Wraparound in Graphics LinuxEPSS 0.9%KEVCVE-2023-43826HIGHApache Guacamole: Integer overflow in handling of VNC image buffersEPSS 0.9%CVE-2021-20300—A flaw was found in OpenEXR's hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp. This flaw allows an attacker who can submit a crafteEPSS 0.9%CVE-2021-27411MEDIUMMicrium OS Integer Overflow or WraparoundEPSS 0.9%CVE-2026-25173HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 0.9%CVE-2020-27776—A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could triEPSS 0.9%CVE-2023-4398HIGHAn integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware EPSS 0.9%CVE-2021-3933—An integer overflow could occur when OpenEXR processes a crafted file on systems where size_t < 64 bits. This could cause an invalid bytesPeEPSS 0.9%CVE-2024-49078MEDIUMWindows Mobile Broadband Driver Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2023-30463HIGHAltran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because of an integer overflow in pico_ipv6_alloc wEPSS 0.9%