Weaknesses of type CWE-190

1,670 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2025-30712HIGHVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.EPSS 0.6%CVE-2023-0933HIGHInteger overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafEPSS 0.6%CVE-2026-24210HIGHNVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an integer overflow. A successful exploit of this vulnEPSS 0.6%CVE-2024-21631MEDIUMInteger overflow in URI leading to potential host spoofingEPSS 0.6%CVE-2019-11476MEDIUMInteger overflow in whoopsie results in out-of-bounds heap writeEPSS 0.6%CVE-2026-18022HIGHpgvector buffer overflow via integer wraparound in IVFFlat index build on 32-bit systemsEPSS 0.6%CVE-2026-33900MEDIUMImageMagick has a Heap overflow caused by integer overflow/wraparound in viff encoder on 32-bit buildsEPSS 0.6%CVE-2021-27417MEDIUMeCosCentric eCosPro RTOS Integer Overflow or WraparoundEPSS 0.6%CVE-2026-74977HIGHInteger overflow in the Graphics componentEPSS 0.6%CVE-2024-46669LOWAn Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2.10 and below; FortiSASE version 23.4.b ForEPSS 0.6%CVE-2026-8949HIGHInteger overflow in the Widget: Win32 componentEPSS 0.6%CVE-2026-20639HIGHAn integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS TaEPSS 0.6%CVE-2025-30405CRITICALAn integer overflow vulnerability in the loading of ExecuTorch models can cause objects to be placed outside their allocated memory area, poEPSS 0.6%CVE-2025-30404CRITICALAn integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execuEPSS 0.6%CVE-2025-69204MEDIUMImageMagick converting a malicious MVG file to SVG caused an integer overflow.EPSS 0.6%CVE-2026-28214MEDIUMFirebird server hangs when using specific clumplet on batch creationEPSS 0.6%CVE-2026-25794HIGHImageMagick has heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensionsEPSS 0.6%CVE-2021-20203—An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0. It may occur if a guest was to supplyEPSS 0.6%CVE-2024-23307MEDIUMInteger overflow in raid5_cache_count in Linux kernelEPSS 0.6%CVE-2026-65346HIGHAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, mEPSS 0.6%