Weaknesses of type CWE-190

1,661 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2025-40907MEDIUMFCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) libraryEPSS 0.6%CVE-2023-38127HIGHAn integer overflow exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372. A specially crafted document can cause the paEPSS 0.6%CVE-2024-35366CRITICALFFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When paEPSS 0.6%CVE-2026-55969HIGHApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()EPSS 0.6%CVE-2023-3107HIGHRemote denial of service in IPv6 fragment reassemblyEPSS 0.6%CVE-2023-21802HIGHWindows Media Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-42974HIGHWindows Performance Monitor Remote Code Execution VulnerabilityEPSS 0.6%CVE-2021-34536HIGHWindows Storage Spaces Controller Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2026-8805HIGHDenial-of-service (DoS) vulnerability in MELSEC iQ-F Series EtherNet/IP moduleEPSS 0.6%CVE-2024-26171MEDIUMSecure Boot Security Feature Bypass VulnerabilityEPSS 0.6%CVE-2024-53151HIGHsvcrdma: Address an integer overflowEPSS 0.6%CVE-2026-62822HIGHWindows GDI+ Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-32316HIGHjq: Integer overflow in jvp_string_append() allows Heap-based Buffer OverflowEPSS 0.6%CVE-2026-28231MEDIUMpillow_heif Has Integer Overflow in Encode Path Buffer Validation that Leads to Heap Out-of-Bounds ReadEPSS 0.6%CVE-2025-2177MEDIUMlibzvbi search.c vbi_search_new integer overflowEPSS 0.6%CVE-2023-27354MEDIUMThis vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-3EPSS 0.6%CVE-2024-30067MEDIUMWinlogon Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2025-0838MEDIUMHeap Buffer overflow in AbseilEPSS 0.6%CVE-2018-16301—The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability thEPSS 0.6%CVE-2022-49279HIGHNFSD: prevent integer overflow on 32 bit systemsEPSS 0.6%