Weaknesses of type CWE-190

1,670 results

Estouro ou envolvimento de inteiro

Ocorre quando uma operação aritmética produz um resultado maior (ou menor, em caso de sinal) do que o tipo de dado consegue representar, causando truncamento ou envolvimento para valores inesperados. Um atacante explora isso para contornar validações, causar alocações de memória inválidas ou alterar lógica de negócio.

Example

Um servidor calcula tamanho de buffer como `size = quantidade * 100`. Se quantidade for próxima ao máximo de um inteiro de 32 bits, a multiplicação estoura e retorna um valor pequeno, levando a alocação insuficiente e buffer overflow posterior.

How to mitigate

Valide limites antes de operações aritméticas (verifique se o resultado cabe no tipo), use tipos de dado maiores quando possível, ou aplique bibliotecas de aritmética segura que detectam estouro em tempo de execução.

CVE-2022-38680MEDIUMIn wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2021-0876HIGHIn PVRSRVBridgePhysmemNewRamBackedLockedPMR of the PowerVR kernel driver, a missing size check means there is a possible integer overflow thEPSS 0.1%CVE-2025-54631MEDIUMVulnerability of insufficient data length verification in the partition module. Impact: Successful exploitation of this vulnerability may afEPSS 0.1%CVE-2025-20803MEDIUMIn dpe, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege if a malicious acEPSS 0.1%CVE-2025-20807MEDIUMIn dpe, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious EPSS 0.1%CVE-2022-47322MEDIUMIn wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2023-32828MEDIUMIn vpu, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System exeEPSS 0.1%CVE-2024-34733HIGHIn DevmemXIntMapPages of devicemem_server.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to locEPSS 0.1%CVE-2025-20722MEDIUMIn gnss driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a maliEPSS 0.1%CVE-2023-32881MEDIUMIn battery, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure with SystEPSS 0.1%CVE-2023-32829MEDIUMIn apusys, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System EPSS 0.1%CVE-2025-47351HIGHInteger Overflow or Wraparound in DSP ServiceEPSS 0.1%CVE-2024-20025MEDIUMIn da, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execEPSS 0.1%CVE-2018-9482MEDIUMIn intr_data_copy_cb of btif_hd.cc, there is a possible out of bounds read due to an integer overflow. This could lead to local information EPSS 0.1%CVE-2026-11281MEDIUMInteger overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive iEPSS 0.1%CVE-2023-32823MEDIUMIn rpmb , there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System EPSS 0.1%CVE-2025-20653MEDIUMIn da, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure, if an attacker haEPSS 0.1%CVE-2025-36900MEDIUMIn lwis_test_register_io of lwis_device_test.c, there is a possible OOB Write due to an integer overflow. This could lead to local escalatioEPSS 0.1%CVE-2026-18462HIGHInteger Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional (Core Libraries) allows Shared Resource Manipulation.EPSS 0.1%CVE-2025-47365HIGHInteger Overflow or Wraparound in Automotive PlatformEPSS 0.1%