Weaknesses of type CWE-190

1,670 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2026-28532MEDIUMFRRouting < 10.5.3 Integer Overflow in OSPF TLV Parser FunctionsEPSS 0.4%CVE-2024-57256HIGHAn integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a craftedEPSS 0.4%CVE-2026-53466MEDIUMImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflowEPSS 0.4%CVE-2023-38651HIGHMultiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode times parsing functionality of GTKWave 3.3.115. A specialEPSS 0.4%CVE-2023-29364HIGHWindows Authentication Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2023-38650HIGHMultiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode times parsing functionality of GTKWave 3.3.115. A specialEPSS 0.4%CVE-2026-83601MEDIUMNetdata: Streaming protocol dimension slot has no upper-bound guard, allowing integer overflow and out-of-bounds writeEPSS 0.4%CVE-2021-33631MEDIUMKernel crash in EXT4 filesystemEPSS 0.4%CVE-2024-47416HIGHAnimate | Integer Overflow or Wraparound (CWE-190)EPSS 0.4%CVE-2024-34139HIGHAdobe Bridge has an integer overflow vulnerability when parsing SVG fileEPSS 0.4%CVE-2025-22471MEDIUMDell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.1, contains an integer overflow or wraparound vulnerability. An unauthenticated attacEPSS 0.4%CVE-2022-0998—An integer overflow flaw was found in the Linux kernel’s virtio device driver code in the way a user triggers the vhost_vdpa_config_validateEPSS 0.4%CVE-2026-55400MEDIUMCVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers with an authenticated session can send sEPSS 0.4%CVE-2019-10142HIGHA flaw was found in the Linux kernel's freescale hypervisor manager implementation, kernel versions 5.0.x up to, excluding 5.0.17. A parametEPSS 0.4%CVE-2026-62897HIGH.NET Framework Remote Code Execution VulnerabilityEPSS 0.4%CVE-2025-58749LOWWAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT modeEPSS 0.4%CVE-2026-33298HIGHllama.cpp has a Heap Buffer Overflow via Integer Overflow in GGUF Tensor ParsingEPSS 0.4%CVE-2022-48468MEDIUMprotobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.EPSS 0.4%CVE-2024-34121HIGHIllustrator | Integer Overflow or Wraparound (CWE-190)EPSS 0.4%CVE-2026-47857MEDIUMReactor Core windowTimeout fair-backpressure stream hang due to 20-bit index wrap-aroundEPSS 0.4%