Weaknesses of type CWE-190

1,670 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2026-40915MEDIUMGimp: gimp: heap buffer overflow due to integer overflow in fits image loaderEPSS 0.4%CVE-2024-51737HIGHRediSearch Integer Overflow with LIMIT or KNN arguments can lead to RCEEPSS 0.4%CVE-2024-51540HIGHDell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticatEPSS 0.4%CVE-2025-54804MEDIUMRussh is missing an overflow check during channel windows adjustEPSS 0.4%CVE-2025-58715HIGHWindows Speech Runtime Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2022-48480HIGHInteger overflow vulnerability in some phones. Successful exploitation of this vulnerability may affect service confidentiality.EPSS 0.4%CVE-2023-25662HIGHTensorFlow vulnerable to integer overflow in EditDistanceEPSS 0.4%CVE-2026-54241HIGHlibde265: SAO sequential filter heap buffer overflow via signed integer overflowEPSS 0.4%CVE-2023-21704HIGHMicrosoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-23417HIGHWindows Partition Management Driver Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-54240HIGHlibde265: Pixel accessor signed integer overflow causes heap OOB read/writeEPSS 0.4%CVE-2026-0861HIGHInteger overflow in memalign leads to heap corruptionEPSS 0.4%CVE-2025-55068HIGHDover Fueling Solutions ProGauge MagLink LX4 Devices Integer Overflow or WraparoundEPSS 0.4%CVE-2023-4424HIGHbt: hci: DoS and possible RCEEPSS 0.4%CVE-2022-2454HIGHInteger Overflow or Wraparound in gpac/gpacEPSS 0.4%CVE-2026-48112MEDIUMGHSL-2026-122 7-Zip Ar SYMDEF OOB ReadEPSS 0.4%CVE-2026-88372HIGHlibsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.EPSS 0.4%CVE-2026-24889MEDIUMsoroban-sdk has overflow in Bytes::slice, Vec::slice, GenRange::gen_range for u64EPSS 0.4%CVE-2026-58472MEDIUMGNU Wget 1.25.0 Heap Buffer Overflow via HTML Attribute EncodingEPSS 0.4%CVE-2026-33596LOWTCP backend stream ID overflowEPSS 0.4%