Weaknesses of type CWE-190

1,670 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2026-88361HIGHSumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec() when parsing PDF PageLabels /Nums entries.EPSS 0.4%CVE-2026-13221CRITICALPerl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunkEPSS 0.4%CVE-2026-87823HIGHzstd-jni 1.1.1 through 1.5.7-13 Out-of-Bounds Read via Direct ByteBuffer Frame-Size MethodsEPSS 0.4%CVE-2026-93314MEDIUMFreedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflowEPSS 0.4%CVE-2023-38621HIGHMultiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt fiEPSS 0.4%CVE-2023-36915HIGHMultiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chain_table allocation functionality of GTKWave 3.3.115. A sEPSS 0.4%CVE-2023-33976HIGHTensorFlow segfault in array_ops.upper_boundEPSS 0.4%CVE-2023-35989HIGHAn integer overflow vulnerability exists in the LXT2 zlib block allocation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file EPSS 0.4%CVE-2026-93313MEDIUMFreedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflowEPSS 0.4%CVE-2023-38622HIGHMultiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt fiEPSS 0.4%CVE-2026-39886MEDIUMOpenEXR has HTJ2K Signed Integer Overflow in ht_undo_impl()EPSS 0.4%CVE-2026-55648MEDIUMFreeRDP: Integer Overflow in `freerdp_image_copy_from_icon_data` Bypasses Bounds CheckEPSS 0.4%CVE-2023-35004HIGHAn integer overflow vulnerability exists in the VZT longest_len value allocation functionality of GTKWave 3.3.115. A specially crafted .vzt EPSS 0.4%CVE-2023-36916HIGHMultiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chain_table allocation functionality of GTKWave 3.3.115. A sEPSS 0.4%CVE-2026-84449LOWlibheif hOp_RGB24_32_to_YCbCr Memory Access Error / SEGVEPSS 0.4%CVE-2026-93577CRITICALInteger Overflow or Wraparound in GitLabEPSS 0.4%CVE-2026-54900MEDIUMOj: Negative-Size memcpy in Oj::Parser create_id Attribute HandlingEPSS 0.4%CVE-2026-9621CRITICALRSLinx Classic® - Multiple VulnerabilitiesEPSS 0.4%CVE-2026-54903MEDIUMOj: Integer Overflow in Oj.load 2GB String HandlingEPSS 0.4%CVE-2026-4739CRITICALInteger overflow vulnerabilities in InsightSoftwareConsortium/ITKEPSS 0.4%