Weaknesses of type CWE-190

1,670 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2026-0039MEDIUMIn multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This couldEPSS 0.3%CVE-2026-0041MEDIUMIn multiple functions of ubsan_throwing_runtime.cpp, there is a possible UBSan failure due to an integer overflow. This could lead to remoteEPSS 0.3%CVE-2026-0044MEDIUMIn multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause the system to crash due to an integer overflow. This cEPSS 0.3%CVE-2026-0040MEDIUMIn multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead toEPSS 0.3%CVE-2026-10118HIGHPoppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplicationEPSS 0.3%CVE-2023-4295HIGHMali GPU Kernel Driver allows improper GPU memory processing operationsEPSS 0.3%CVE-2026-47925MEDIUMAcrobat Reader | Integer Overflow or Wraparound (CWE-190)EPSS 0.3%CVE-2026-25208HIGHInteger overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4EPSS 0.3%CVE-2026-89277MEDIUMCAI Content Credentials | Integer Overflow or Wraparound (CWE-190)EPSS 0.3%CVE-2026-27281MEDIUMDNG SDK | Integer Overflow or Wraparound (CWE-190)EPSS 0.3%CVE-2024-26884HIGHbpf: Fix hashtab overflow check on 32-bit archesEPSS 0.3%CVE-2022-42265MEDIUMNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to infEPSS 0.3%CVE-2022-42256MEDIUMNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow in index validaEPSS 0.3%CVE-2022-34673MEDIUMNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lEPSS 0.3%CVE-2026-11085HIGHInteger overflow in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds meEPSS 0.2%CVE-2026-89158MEDIUMPCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.EPSS 0.2%CVE-2024-36618MEDIUMFFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting EPSS 0.2%CVE-2024-57258HIGHInteger overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, EPSS 0.2%CVE-2025-15534MEDIUMraysan5 raylib rtext.c LoadFontData integer overflowEPSS 0.2%CVE-2025-55647MEDIUMAn Out-of-Memory in the mp4_mux_cenc_insert_pssh function (filters/mux_isom.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of SerEPSS 0.2%