Weaknesses of type CWE-190

1,661 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2026-4694HIGHIncorrect boundary conditions, integer overflow in the Graphics componentEPSS 0.8%CVE-2024-36671CRITICALnodemcu before v3.0.0-release_20240225 was discovered to contain an integer overflow via the getnum function at /modules/struct.c.EPSS 0.8%CVE-2022-45934HIGHAn issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c has an integer wraparound via L2CEPSS 0.8%CVE-2022-23484HIGHInteger Overflow in xrdpEPSS 0.8%CVE-2023-36866HIGHMicrosoft Office Visio Remote Code Execution VulnerabilityEPSS 0.8%CVE-2024-38034HIGHWindows Filtering Platform Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2026-4150HIGHGIMP PSD File Parsing Integer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-48235LOWoverflow in ex address parsing in vimEPSS 0.8%CVE-2023-48237LOWoverflow in shift_line in vimEPSS 0.8%CVE-2023-48234LOWoverflow in nv_z_get_count in vimEPSS 0.8%CVE-2023-48233LOWoverflow with count for :s command in vimEPSS 0.8%CVE-2026-72986HIGHGraphic Fonts Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-32051HIGHRaw Image Extension Remote Code Execution VulnerabilityEPSS 0.8%CVE-2025-49710CRITICALInteger overflow in OrderedHashTableEPSS 0.7%CVE-2023-28295HIGHMicrosoft Publisher Remote Code Execution VulnerabilityEPSS 0.7%CVE-2025-10533HIGHInteger overflow in the SVG componentEPSS 0.7%CVE-2023-0705HIGHInteger overflow in Core in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who had one a race condition to potentially exploEPSS 0.7%CVE-2023-28248HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2025-64721CRITICALSandboxie's Integer Overflow in SbieIniServer::RC4Crypt allows sandbox escape and SYSTEM compromiseEPSS 0.7%CVE-2026-24214HIGHNVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an integer overflow. A successful EPSS 0.7%