Weaknesses of type CWE-190

1,670 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2023-46246MEDIUMInteger Overflow in :history command in VimEPSS 0.4%CVE-2026-37537HIGHcollin80/Open-SAE-J1939 thru commit 744024d4306bc387857dfce439558336806acb06 (2023-03-08) contains an integer underflow leading to out-of-boEPSS 0.4%CVE-2024-57254HIGHAn integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a crafted squashfs filesyEPSS 0.4%CVE-2024-57255HIGHAn integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of EPSS 0.4%CVE-2023-38653HIGHMultiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode dict parsing functionality of GTKWave 3.3.115. A speciallEPSS 0.4%CVE-2023-38652HIGHMultiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode dict parsing functionality of GTKWave 3.3.115. A speciallEPSS 0.4%CVE-2026-95619HIGHGcc: libstdc++ integer overflow in `new` operatorEPSS 0.4%CVE-2026-42580MEDIUMNetty: HTTP Request Smuggling due to incorrect chunk size parsingEPSS 0.4%CVE-2026-16529HIGHPcp: pcp: denial of service due to signed integer overflowEPSS 0.4%CVE-2026-66758HIGHGimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits imagesEPSS 0.4%CVE-2026-21688HIGHiccDEV has Type Confusion in SIccCalcOp::ArgsPushed() at IccProfLib/IccMpeCalc.cppEPSS 0.4%CVE-2026-21485HIGHiccDEV Undefined Behavior (UB) and Out of Memory in CIccProfile::LoadTag()EPSS 0.4%CVE-2025-48174MEDIUMIn libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+size.EPSS 0.4%CVE-2026-18304HIGHGIMP TIF File Parsing Integer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-18305HIGHGIMP TIF File Parsing Integer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-18671MEDIUMIBM i is Affected By Multiple Vulnerabilities in NetServerEPSS 0.4%CVE-2025-48816HIGHHID Class Driver Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2025-49176HIGHXorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionEPSS 0.4%CVE-2026-54920NONEOpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resizeEPSS 0.4%CVE-2025-14933HIGHNSF Unidata NetCDF-C NC Variable Integer Overflow Remote Code Execution VulnerabilityEPSS 0.4%