Weaknesses of type CWE-190

1,657 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2024-55656HIGHRedisBloom Integer Overflow Remote Code Execution VulnerabilityEPSS 15.0%CVE-2018-14634HIGHAn integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otEPSS 14.7%KEVCVE-2021-32628HIGHVulnerability in handling large ziplistsEPSS 13.5%CVE-2022-35977MEDIUMInteger overflow in certain command arguments can drive Redis to OOM panicEPSS 13.5%CVE-2025-6191HIGHInteger overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory accessEPSS 11.6%CVE-2024-44087CRITICALA vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6.0 (All versions < V6.0 SPEPSS 10.9%CVE-2019-6753LOWThis vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.3.0.10826. User iEPSS 10.7%CVE-2023-36900HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 10.6%CVE-2021-44711HIGHAdobe Acrobat Reader DC annotation gestures integer overflow vulnerabilityEPSS 10.0%CVE-2019-3855HIGHAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from EPSS 9.3%CVE-2024-20698HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 8.6%CVE-2025-50404MEDIUMIntelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow. The websReadEvent function incorrectly uses the int type when EPSS 8.2%CVE-2023-23410HIGHWindows HTTP.sys Elevation of Privilege VulnerabilityEPSS 8.0%CVE-2017-8816CRITICALThe NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integerEPSS 7.8%CVE-2024-38080HIGHWindows Hyper-V Elevation of Privilege VulnerabilityEPSS 7.1%KEVCVE-2021-30952HIGHAn integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15EPSS 7.0%KEVCVE-2023-35632HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 6.5%CVE-2022-42898HIGHPAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code executionEPSS 6.4%CVE-2022-28615CRITICALRead beyond bounds in ap_strcmp_match()EPSS 6.3%CVE-2019-11048MEDIUMTemporary files are not cleaned after OOM when parsing HTTP request dataEPSS 6.3%