Weaknesses of type CWE-190

1,670 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2026-43908HIGHOpenImageIO: Signed integer overflow in ConvertCbYCrYToRGB leads to heap out-of-bounds write in DPX 4:2:2 decoderEPSS 0.5%CVE-2025-55753HIGHApache HTTP Server: mod_md (ACME), unintended retry intervalsEPSS 0.4%CVE-2024-37305HIGHBuffer overflow in deserialization in oqs-provider EPSS 0.4%CVE-2026-55026MEDIUMMicrosoft Office Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-37540HIGHOpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing. In elf_loader.c, it performs multiplicatEPSS 0.4%CVE-2021-27259HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. An attacker muEPSS 0.4%CVE-2025-54091HIGHWindows Hyper-V Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-47288HIGHWindows Kerberos Key Distribution Center (KDC) Remote Code ExecutionEPSS 0.4%CVE-2020-10067HIGHInteger Overflow In is_in_region Allows User Thread To Access Kernel MemoryEPSS 0.4%CVE-2026-8295MEDIUMInteger overflow in simdjsonEPSS 0.4%CVE-2025-5914HIGHLibarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.cEPSS 0.4%CVE-2026-58050HIGHlibssh2 - Integer Overflow in publickey Subsystem Attribute AllocationEPSS 0.4%CVE-2019-11484MEDIUMInteger overflow in bson_ensure_spaceEPSS 0.4%CVE-2024-23337MEDIUMjq has signed integer overflow in jv.c:jvp_array_writeEPSS 0.4%CVE-2025-10923HIGHGIMP WBMP File Parsing Integer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-0988LOWGlib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()EPSS 0.4%CVE-2025-10924HIGHGIMP FF File Parsing Integer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-39811MEDIUMA integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versEPSS 0.4%CVE-2026-66039HIGHFFmpeg MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF FileEPSS 0.4%CVE-2026-50298MEDIUMWindows Spaceport.sys Elevation of Privilege VulnerabilityEPSS 0.4%