Weaknesses of type CWE-190

1,661 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2024-31031HIGHAn issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integeEPSS 0.9%CVE-2024-25366MEDIUMBuffer Overflow vulnerability in mz-automation.de libiec61859 v.1.4.0 allows a remote attacker to cause a denial of service via the mmsServeEPSS 0.9%CVE-2021-27421HIGHNXP MCUXpresso SDK Integer Overflow or WraparoundEPSS 0.9%CVE-2024-30012MEDIUMWindows Mobile Broadband Driver Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-69734MEDIUMMicrosoft Office Word Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-2921HIGHGStreamer RIFF Palette Integer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2020-7860HIGHUnEGG v0.5 and eariler versions have a Integer overflow vulnerability, triggered when the user opens a malformed specific file that is mishaEPSS 0.9%CVE-2020-7872HIGHDaviewIndy v8.98.7.0 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed format file that EPSS 0.9%CVE-2025-53518CRITICALAn integer overflow vulnerability exists in the ABF parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa)EPSS 0.9%CVE-2024-30072HIGHMicrosoft Event Trace Log File Parsing Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-71336HIGHWindows Work Folder Service Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-52389CRITICALUTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::converEPSS 0.9%CVE-2023-38698MEDIUM.eth registrar controller can shorten the duration of registered namesEPSS 0.8%CVE-2025-57803HIGHImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflowEPSS 0.8%CVE-2025-5449MEDIUMLibssh: integer overflow in libssh sftp server packet length validation leading to denial of serviceEPSS 0.8%CVE-2026-2272MEDIUMGimp: gimp: memory corruption due to integer overflow in ico file handlingEPSS 0.8%CVE-2025-47294MEDIUMA integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0 through 7.0.14 may allow a remote unauthenEPSS 0.8%CVE-2026-26111HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 0.8%CVE-2024-30021MEDIUMWindows Mobile Broadband Driver Remote Code Execution VulnerabilityEPSS 0.8%CVE-2021-4206—A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc() function can lead to the allocation EPSS 0.8%