Weaknesses of type CWE-190

1,661 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2025-32718HIGHWindows SMB Client Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-73193CRITICALDBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by preparseEPSS 0.5%CVE-2026-33298HIGHllama.cpp has a Heap Buffer Overflow via Integer Overflow in GGUF Tensor ParsingEPSS 0.5%CVE-2026-62735HIGHWindows HTTP.sys Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2025-29072HIGHAn integer overflow in Nethermind Juno before v.12.05 within the Sierra bytecode decompression logic within the "cairo-lang-starknet-classesEPSS 0.5%CVE-2020-10726MEDIUMA vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep sEPSS 0.5%CVE-2025-23324HIGHNVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an integer overflow or wraparound, leEPSS 0.5%CVE-2025-12501HIGHInteger overflow in GameMaker IDE below 2024.14.0 version can lead to can lead to application crashes through denial-of-service attacks (DoSEPSS 0.5%CVE-2026-19313CRITICALFireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code ExecutionEPSS 0.5%CVE-2025-22059HIGHudp: Fix multiple wraparounds of sk->sk_rmem_alloc.EPSS 0.5%CVE-2017-7482HIGHIn the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This EPSS 0.5%CVE-2026-94030LOWSerenityOS LibGfx BMPLoader.cpp decode_bmp_pixel_data integer overflowEPSS 0.5%CVE-2026-32875HIGHUltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loopEPSS 0.5%CVE-2024-3077MEDIUMBluetooth: integer underflow in gatt_find_info_rspEPSS 0.5%CVE-2025-3360LOWGlibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().EPSS 0.5%CVE-2026-28497CRITICALTinyWeb: Integer Overflow in `_Val` (HTTP Request Smuggling)EPSS 0.5%CVE-2022-25748CRITICALMemory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, SnapdEPSS 0.5%CVE-2026-7598MEDIUMlibssh2 userauth.c userauth_password integer overflowEPSS 0.5%CVE-2026-54124HIGHWindows Terminal Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-21765HIGHWindows Print Spooler Elevation of Privilege VulnerabilityEPSS 0.5%