Weaknesses of type CWE-190

1,661 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2026-54124HIGHWindows Terminal Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-55048HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-21765HIGHWindows Print Spooler Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2020-14344MEDIUMAn integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version EPSS 0.5%CVE-2020-14311MEDIUMThere is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an EPSS 0.5%CVE-2026-31814HIGHYamux remote Panic via malformed WindowUpdate creditEPSS 0.5%CVE-2026-20339HIGHClamAV PESpin File Format Processing Integer Overflow VulnerabilityEPSS 0.5%CVE-2025-64098LOWFastDDS has Out-of-memory in readOctetVector via Manipulated DATA Submessage when DDS Security is enabledEPSS 0.5%CVE-2026-24403HIGHiccDEV Undefined Behavior in CIccProfile::CheckHeader() Leads to Integer OverflowEPSS 0.5%CVE-2025-70290CRITICALAn issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by mEPSS 0.5%CVE-2026-14662HIGHPostgreSQL tsvector and tsquery undersize allocations, via integer wraparoundEPSS 0.5%CVE-2025-14178MEDIUMHeap buffer overflow in array_merge()EPSS 0.5%CVE-2023-21754HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2025-3500CRITICALInteger Overflow in Avast Antiviurs 25.1.981.6 on Windows may result in privilege escalationEPSS 0.5%CVE-2024-42415HIGHAn integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured FiEPSS 0.5%CVE-2026-16834CRITICALVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.5%CVE-2026-3536HIGHInteger overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory accEPSS 0.5%CVE-2024-27101HIGHInteger overflow in chunking helper causes dispatching to miss elements or panicEPSS 0.5%CVE-2024-21905MEDIUMQTS, QuTS hero, QuTScloudEPSS 0.5%CVE-2023-2610HIGHInteger Overflow or Wraparound in vim/vimEPSS 0.5%