Weaknesses of type CWE-190

1,661 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2026-24173HIGHNVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request to the sEPSS 0.5%CVE-2025-23327HIGHNVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer overflow through specEPSS 0.5%CVE-2025-24528HIGHIn MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() inEPSS 0.5%CVE-2025-24156HIGHAn integer overflow was addressed through improved input validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS VEPSS 0.5%CVE-2024-45287CRITICALMultiple vulnerabilities in libnvEPSS 0.5%CVE-2025-29087LOWIn SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocaEPSS 0.5%CVE-2022-1116HIGHInteger Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to cause memory corruption and escalate priviEPSS 0.5%CVE-2026-6679HIGHDTLS 1.3 ACK serialization heap buffer overflow via integer truncationEPSS 0.5%CVE-2023-35341MEDIUMMicrosoft DirectMusic Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-37555HIGHAn issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV codEPSS 0.5%CVE-2025-21382HIGHWindows Graphics Component Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2022-1921—Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi files. Potential for aEPSS 0.5%CVE-2024-53880MEDIUMNVIDIA Triton Inference Server contains a vulnerability in the model loading API, where a user could cause an integer overflow or wraparoundEPSS 0.5%CVE-2026-47288HIGHWindows Kerberos Key Distribution Center (KDC) Remote Code ExecutionEPSS 0.5%CVE-2025-3408MEDIUMNothings stb stb_dupreplace integer overflowEPSS 0.5%CVE-2026-95619HIGHGcc: libstdc++ integer overflow in `new` operatorEPSS 0.5%CVE-2025-27918CRITICALAn issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOSEPSS 0.5%CVE-2026-2271LOWGimp: gimp: denial of service via crafted psp image fileEPSS 0.5%CVE-2023-35312HIGHMicrosoft VOLSNAP.SYS Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2024-43091CRITICALIn filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code EPSS 0.5%