Weaknesses of type CWE-191

399 results

Underflow de inteiro (envolvimento cíclico)

Ocorre quando uma operação aritmética subtrai um valor de um inteiro e o resultado fica abaixo do limite mínimo do tipo, causando um envolvimento cíclico para o valor máximo. Por exemplo, subtrair 1 de um inteiro sem sinal de valor 0 resulta no maior valor possível. Isso pode contornar validações de segurança ou causar comportamentos inesperados.

Example

Um programa valida se um tamanho é >= 0 antes de alocar memória. Se o tamanho vier de uma subtração (total - offset) onde offset é maior que total, um inteiro sem sinal faz o resultado "pular" para um número gigante, burlando a validação e causando alocação excessiva.

How to mitigate

Sempre validar o resultado de operações aritméticas antes de usá-lo (verificar se a subtração não gerou underflow), usar tipos inteiros com sinal quando apropriado para detectar condições inválidas, ou usar bibliotecas de aritmética segura que disparam exceções em overflow/underflow.

CVE-2023-48298MEDIUMInteger underflow leading to stack overflow in FPC codec decompressionEPSS 0.6%CVE-2026-66307HIGHSkype for Business and Lync Denial of Service VulnerabilityEPSS 0.6%CVE-2023-33158HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%CVE-2020-14346—A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead EPSS 0.6%CVE-2025-2581MEDIUMxmedcon DICOM File malloc integer underflowEPSS 0.6%CVE-2020-14361—A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilegeEPSS 0.6%CVE-2022-20483HIGHIn several functions that parse avrc response in avrc_pars_ct.cc and related files, there are possible out of bounds reads due to integer ovEPSS 0.6%CVE-2024-52558MEDIUMPlanet Technology Planet WGS-804HPT Integer UnderflowEPSS 0.6%CVE-2026-59090HIGHGimp: gimp: arbitrary code execution in psd plugin due to unsigned underflowEPSS 0.6%CVE-2026-40356MEDIUMIn MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accepEPSS 0.6%CVE-2023-29349HIGHMicrosoft ODBC and OLE DB Remote Code Execution VulnerabilityEPSS 0.6%CVE-2024-20474MEDIUMA vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an unauthenticated, remoteEPSS 0.6%CVE-2020-14362—A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilegeEPSS 0.6%CVE-2026-66033HIGHlibssh2 Integer Underflow DoS via AES-GCM Cipher NegotiationEPSS 0.6%CVE-2026-13308HIGHAutel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-89028HIGHMikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndXEPSS 0.6%CVE-2025-67269HIGHAn integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to commit `ffa1d6f40bca0b0EPSS 0.5%CVE-2025-30668MEDIUMZoom Workplace Apps - NULL Pointer DereferenceEPSS 0.5%CVE-2024-0808CRITICALInteger underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a maEPSS 0.5%CVE-2026-58016HIGHGlib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"EPSS 0.5%