Weaknesses of type CWE-190

1,670 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2025-51495HIGHAn integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially crafted WebSocket requEPSS 0.4%CVE-2026-57235MEDIUMNokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`EPSS 0.4%CVE-2026-59982HIGHOpenEXR: DWAA InputFile AC buffer overflow on ILP32 platformsEPSS 0.4%CVE-2026-14677HIGHPostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparoundEPSS 0.4%CVE-2026-58470MEDIUMGNU Wget 1.25.0 Integer Overflow via Content-Range Header ParsingEPSS 0.4%CVE-2025-5478HIGHSony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-39684MEDIUMTencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer OverflowEPSS 0.4%CVE-2020-8874HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An attacker muEPSS 0.4%CVE-2026-53432MEDIUMInteger Overflow in fzfEPSS 0.4%CVE-2023-39275HIGHMultiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 EPSS 0.4%CVE-2023-39317HIGHMultiple integer overflow vulnerabilities exist in the LXT2 num_dict_entries functionality of GTKWave 3.3.115. A specially crafted .lxt2 filEPSS 0.4%CVE-2026-59186HIGHOpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) buildsEPSS 0.4%CVE-2023-36864HIGHAn integer overflow vulnerability exists in the fstReaderIterBlocks2 temp_signal_value_buf allocation functionality of GTKWave 3.3.115. A spEPSS 0.4%CVE-2023-39316HIGHMultiple integer overflow vulnerabilities exist in the LXT2 num_dict_entries functionality of GTKWave 3.3.115. A specially crafted .lxt2 filEPSS 0.4%CVE-2023-39270HIGHMultiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 EPSS 0.4%CVE-2024-10917LOWEclipse OpenJ9 might return an incorrect value in JNI function GetStringUTFLengthEPSS 0.4%CVE-2023-39272HIGHMultiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 EPSS 0.4%CVE-2023-39271HIGHMultiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 EPSS 0.4%CVE-2023-39273HIGHMultiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 EPSS 0.4%CVE-2023-39274HIGHMultiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 EPSS 0.4%