Weaknesses of type CWE-190

1,670 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2026-65390HIGHAn integer overflow was addressed with improved input validation. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS EPSS 0.4%CVE-2026-17705HIGHInteger overflow in libxml in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via EPSS 0.4%CVE-2026-19174HIGHInteger overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a cEPSS 0.4%CVE-2026-65391HIGHAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1EPSS 0.4%CVE-2026-82076HIGHInteger Overflow in Query Planner Leads to Unbounded Memory Allocation and Denial of Service in MongoDB ServerEPSS 0.4%CVE-2026-90473MEDIUMmsgpack-java through 0.9.12 Integer Overflow via MAP32EPSS 0.4%CVE-2026-91728CRITICALInteger overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a EPSS 0.4%CVE-2026-11725HIGHIBM MQ queue manager is vulnerable to privilege escalationEPSS 0.4%CVE-2025-52935CRITICALInteger Overflow or Wraparound vulnerability in dragonflydb/dragonflyEPSS 0.4%CVE-2026-73558MEDIUMvLLM: Cross-User Data Leak VulnerabilityEPSS 0.4%CVE-2025-65865HIGHAn integer overflow in eProsima Fast-DDS v3.3 allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS 0.4%CVE-2026-84536MEDIUMAn integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS TaEPSS 0.4%CVE-2026-6668HIGHInteger overflow causes an infinite loop in packet buffer growth in PgBouncerEPSS 0.4%CVE-2026-79292HIGHInteger overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process toEPSS 0.4%CVE-2024-36474HIGHAn integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library (EPSS 0.4%CVE-2026-13063MEDIUMlibmongocrypt Improper Input Validation Leading to Process TerminationEPSS 0.4%CVE-2026-88412MEDIUMAn integer overflow in the _BulkInsert_ReadProperty component (/bulk_insert.c) of FalkorDB (Redis module) v4.20.1 allows attackers to cause EPSS 0.4%CVE-2025-62467HIGHWindows Projected File System Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2024-20795HIGHAnimate has an arbitrary code execution vulnerability when parsing svg filesEPSS 0.4%CVE-2026-54226MEDIUMApache Kvrocks: RESTORE IntSet Integer Overflow Leads to Remote DoSEPSS 0.4%