Weaknesses of type CWE-190

1,661 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2025-62171MEDIUMImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systemsEPSS 0.8%CVE-2022-23568MEDIUMInteger overflows in TensorflowEPSS 0.8%CVE-2026-20889CRITICALA heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b. A specially crafted maliciEPSS 0.8%CVE-2024-40765CRITICALAn Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of SEPSS 0.8%CVE-2025-26642HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-11774HIGH389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflowEPSS 0.8%CVE-2024-30064HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2022-21738MEDIUMInteger overflow leading to crash in TensorflowEPSS 0.8%CVE-2022-23575MEDIUMInteger overflow in TensorflowEPSS 0.8%CVE-2022-21729MEDIUMOverflow and uncaught divide by zero in TensorflowEPSS 0.8%CVE-2022-34481HIGHIn the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have occurred when the number of elements to replEPSS 0.8%CVE-2022-23576MEDIUMInteger overflow in TensorflowEPSS 0.8%CVE-2025-66168MEDIUMApache ActiveMQ, Apache ActiveMQ All Module, Apache ActiveMQ MQTT Module: MQTT control packet remaining length field is not properly validatedEPSS 0.8%CVE-2026-43618MEDIUMRsync < 3.4.3 Integer Overflow Information DisclosureEPSS 0.8%CVE-2019-5040HIGHAn exploitable information disclosure vulnerability exists in the Weave MessageLayer parsing of Openweave-core version 4.0.2 and Nest Cam IQEPSS 0.8%CVE-2026-4690CRITICALSandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM componentEPSS 0.8%CVE-2023-35965CRITICALTwo heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafteEPSS 0.8%CVE-2023-35967CRITICALTwo heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A speEPSS 0.8%CVE-2023-35966CRITICALTwo heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafteEPSS 0.8%CVE-2023-35968CRITICALTwo heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A speEPSS 0.8%