Weaknesses of type CWE-190

1,670 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2023-35057HIGHAn integer overflow vulnerability exists in the LXT2 lxt2_rd_trace value elements allocation functionality of GTKWave 3.3.115. A specially cEPSS 0.4%CVE-2024-9123HIGHInteger overflow in Skia in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform an out of bounds memory write via a crEPSS 0.4%CVE-2026-34378MEDIUMOpenEXR has a signed integer overflow in generic_unpack() when parsing EXR files with crafted negative dataWindow.min.xEPSS 0.4%CVE-2024-46953HIGHAn issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format strinEPSS 0.4%CVE-2025-63757HIGHInteger overflow vulnerability in the yuv2ya16_X_c_template function in libswscale/output.c in FFmpeg 8.0.EPSS 0.4%CVE-2021-20224—An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c. Function calls to GeEPSS 0.4%CVE-2025-2082HIGHTesla Model 3 VCSEC Integer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2025-0101MEDIUMWAGO: Year 2038 problemEPSS 0.4%CVE-2025-62599HIGHeprosima Fast DDS affected by Out-of-Memory in readPropertySeq via Manipulated DATA Submessage when DDS Security is enabledEPSS 0.4%CVE-2020-27350MEDIUMapt integer wraparoundEPSS 0.4%CVE-2023-35992HIGHAn integer overflow vulnerability exists in the FST fstReaderIterBlocks2 vesc allocation functionality of GTKWave 3.3.115, when compiled as EPSS 0.4%CVE-2023-32650HIGHAn integer overflow vulnerability exists in the FST_BL_GEOM parsing maxhandle functionality of GTKWave 3.3.115, when compiled as a 32-bit biEPSS 0.4%CVE-2026-18670HIGHVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.4%CVE-2023-35128HIGHAn integer overflow vulnerability exists in the fstReaderIterBlocks2 time_table tsec_nitems functionality of GTKWave 3.3.115. A specially crEPSS 0.4%CVE-2026-6783MEDIUMIncorrect boundary conditions, integer overflow in the Audio/Video: Playback componentEPSS 0.4%CVE-2026-34380MEDIUMOpenEXR has a signed integer overflow (undefined behavior) in undo_pxr24_impl may allow bounds-check bypass in PXR24 decompressionEPSS 0.4%CVE-2025-31203MEDIUMAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS SequEPSS 0.4%CVE-2020-10722MEDIUMA vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could resulEPSS 0.4%CVE-2020-10723MEDIUMA memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on the index of a payloadEPSS 0.4%CVE-2026-4775HIGHLibtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processingEPSS 0.4%