Weaknesses of type CWE-190

1,661 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2026-70329HIGHMicrosoft Outlook Remote Code Execution VulnerabilityEPSS 0.7%CVE-2024-3859MEDIUMOn 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by a malformed OpenTypEPSS 0.7%CVE-2026-76685HIGHUnauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution or Denial-of-Service in HPE Networking EdgeConnect SD-WAN GatewaysEPSS 0.7%CVE-2023-49262CRITICALBuffer overflow vulnerability in Cookie authentication fieldEPSS 0.7%CVE-2024-37310CRITICALEVerest has an integer overflow in the "v2g_incoming_v2gtp" function EPSS 0.7%CVE-2026-4689CRITICALSandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM componentEPSS 0.7%CVE-2024-43641HIGHWindows Registry Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2022-21727HIGHInteger overflow in TensorflowEPSS 0.7%CVE-2026-0880HIGHSandbox escape due to integer overflow in the Graphics componentEPSS 0.7%CVE-2026-4151HIGHGIMP ANI File Parsing Integer Overflow Remote Code Execution VulnerabilityEPSS 0.7%CVE-2026-23876HIGHHeap buffer overflow with attacker-controlled data in XBM parserEPSS 0.7%CVE-2026-35433HIGH.NET Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2023-49441HIGHdnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.EPSS 0.7%CVE-2025-2176MEDIUMlibzvbi io-sim.c vbi_capture_sim_load_caption integer overflowEPSS 0.7%CVE-2025-49689HIGHMicrosoft Virtual Hard Disk Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2026-77896MEDIUMWindows Remote Desktop Client Denial of Service VulnerabilityEPSS 0.7%CVE-2021-26615HIGHbandisoft ARK library integer overflow vulnerabilityEPSS 0.7%CVE-2026-55191HIGHFreeRDP: Heap-buffer-overflow write in AVC444 YUV buffer allocationEPSS 0.7%CVE-2026-43629CRITICALllama.cpp b4882–b9058 Buffer Overflow in KV Cache State RestoreEPSS 0.7%CVE-2026-64774CRITICALAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOSEPSS 0.6%