Weaknesses of type CWE-190

1,670 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2026-84141CRITICALInteger overflow in the Graphics: ImageLib componentEPSS 0.6%CVE-2023-27354MEDIUMThis vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-3EPSS 0.6%CVE-2026-38076HIGHAn integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) EPSS 0.6%CVE-2026-89146HIGHlibp2p-rendezvous through 0.17.1 Denial of Service via Unbounded Registration TTL in Discovery ResponsesEPSS 0.6%CVE-2025-2177MEDIUMlibzvbi search.c vbi_search_new integer overflowEPSS 0.6%CVE-2026-37198HIGHAn integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted GTP pEPSS 0.6%CVE-2026-48095HIGHGHSL-2026-140_7-Zip: 7-Zip has a heap buffer overflow via NTFS compressed stream buffer under-allocationEPSS 0.6%CVE-2024-30067MEDIUMWinlogon Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2026-51536CRITICALIn OpENer 2.3.0 (commit 76b95cf) when parsing incoming CIP (Common Industrial Protocol) network packets, the length parameter is inconsistenEPSS 0.6%CVE-2025-0838MEDIUMHeap Buffer overflow in AbseilEPSS 0.6%CVE-2022-49279HIGHNFSD: prevent integer overflow on 32 bit systemsEPSS 0.6%CVE-2018-16301—The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability thEPSS 0.6%CVE-2025-14422HIGHGIMP PNM File Parsing Integer Overflow Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-16834CRITICALVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.6%CVE-2024-41184CRITICALIn the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record mighEPSS 0.6%CVE-2025-23016CRITICALFastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLeEPSS 0.6%CVE-2026-40046HIGHApache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT: Missing fix for CVE-2025-66168: MQTT control packet remaining length field is not properly validatedEPSS 0.6%CVE-2025-40906CRITICALBSON::XS versions 0.8.4 and earlier for Perl includes a bundled libbson 1.1.7, which has several vulnerabilitiesEPSS 0.6%CVE-2026-59117HIGHWindows Terminal Remote Code Execution VulnerabilityEPSS 0.6%CVE-2024-22861HIGHInteger overflow vulnerability in FFmpeg before n6.1, allows attackers to cause a denial of service (DoS) via the avcodec/osq module.EPSS 0.6%