Weaknesses of type CWE-190

1,670 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2026-38343MEDIUMAn integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoEPSS 0.4%CVE-2026-32239MEDIUMCap'n Proto has an integer overflow in KJ-HTTPEPSS 0.4%CVE-2026-3536HIGHInteger overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory accEPSS 0.4%CVE-2025-48964MEDIUMping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafEPSS 0.4%CVE-2020-10724MEDIUMA vulnerability was found in DPDK versions 18.11 and above. The vhost-crypto library code is missing validations for user-supplied values, pEPSS 0.4%CVE-2026-2921HIGHGStreamer RIFF Palette Integer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-25903HIGHAdobe Dimension USDZ files Integer Overflow or Wraparound Arbitrary code execution EPSS 0.4%CVE-2026-40468LOWHeap buffer overflow in gawkEPSS 0.4%CVE-2026-40469MEDIUMHeap buffer overflow in gawkEPSS 0.4%CVE-2026-5477HIGHPrefix-substitution forgery via integer overflow in wolfCrypt CMACEPSS 0.4%CVE-2026-100208HIGHMicrosoft Office Outlook Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-69373MEDIUMWindows Overlay Filter Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-69846HIGHWindows Secure Kernel Mode Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2025-67111HIGHAn integer overflow in the RTPS protocol implementation of OpenDDS DDS before v3.33.0 allows attackers to cause a Denial of Service (DoS) viEPSS 0.3%CVE-2026-17717CRITICALInteger overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crEPSS 0.3%CVE-2026-17673CRITICALInteger overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potenEPSS 0.3%CVE-2025-7709MEDIUMOut Of Bounds write in FTS5 Extension in SQLiteEPSS 0.3%CVE-2026-17682CRITICALInteger overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to poteEPSS 0.3%CVE-2026-17726CRITICALInteger overflow in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escaEPSS 0.3%CVE-2025-5475HIGHSony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution VulnerabilityEPSS 0.3%