Weaknesses of type CWE-190

1,661 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2026-59879HIGHImmutable.js `List` 32-bit trie overflow → unrecoverable DoSEPSS 0.5%CVE-2026-55057MEDIUMMicrosoft Office Information Disclosure VulnerabilityEPSS 0.5%CVE-2022-2743HIGHInteger overflow in Window Manager in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker who convinced aEPSS 0.5%CVE-2024-2212HIGHInteger wraparounds, under-allocations, and heap buffer overflows in Eclipse ThreadX xQueueCreate() and xQueueCreateSet()EPSS 0.5%CVE-2026-44673HIGHlibyang: lyb_read_string() integer overflow → heap buffer overflowEPSS 0.5%CVE-2025-23323HIGHNVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an integer overflow or wraparound, leEPSS 0.5%CVE-2025-70293CRITICALAn issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fs_get_bgdtable, the size caEPSS 0.5%CVE-2026-15562HIGHJboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of serviceEPSS 0.5%CVE-2026-30909CRITICALCrypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflowsEPSS 0.5%CVE-2020-17396HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must firEPSS 0.5%CVE-2026-63091HIGHProFTPD mod_sftp Signed Integer Overflow via SCP Size-Record ParserEPSS 0.5%CVE-2024-52912HIGHBitcoin Core before 0.21.0 allows a network split that is resultant from an integer overflow (calculating the time offset for newly connectiEPSS 0.5%CVE-2022-20684HIGHCisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service VulnerabilityEPSS 0.5%CVE-2023-28588HIGHInteger Overflow or Wraparound in Bluetooth HostEPSS 0.5%CVE-2026-44812HIGHWindows Graphics Component Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-44803HIGHWindows Graphics Component Remote Code Execution VulnerabilityEPSS 0.5%CVE-2025-6052LOWGlib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstringEPSS 0.5%CVE-2023-28909HIGHInteger Overflow Leading to MTU BypassEPSS 0.5%CVE-2023-21730HIGHMicrosoft Cryptographic Services Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-71479CRITICALNew API: Integer overflow in quota billing yields negative charges (self-crediting)EPSS 0.5%