Weaknesses of type CWE-195

37 results

Erro de conversão de inteiro com sinal para sem sinal

Ocorre quando um valor inteiro com sinal (que pode ser negativo) é convertido ou comparado com um tipo sem sinal, causando comportamento inesperado. Um número negativo, quando interpretado como sem sinal, vira um valor muito grande, podendo contornar validações ou causar alocações excessivas de memória.

Example

Um desenvolvedor valida se um `int` (com sinal) recebido do usuário é menor que 100 antes de alocar um buffer. Se o valor for -1, a comparação com 100 passa na validação, mas ao converter para `unsigned int` para usar em malloc(), -1 vira 4.294.967.295 bytes — causando falha ou overflow.

How to mitigate

Sempre validar o sinal antes de converter para tipo sem sinal; preferir manter cálculos em tipos com sinal quando possível; usar compiladores com avisos para conversões implícitas ativados (-Wsign-conversion no GCC/Clang); implementar validação explícita do intervalo de valores esperados.

CVE-2026-74220HIGHU-Boot before 2026.10-rc5 Buffer Overflow via NFS READ ReplyEPSS 0.3%CVE-2024-25388HIGHdrivers/wlan/wlan_mgmt,c in RT-Thread through 5.0.2 has an integer signedness error and resultant buffer overflow.EPSS 0.3%CVE-2026-115679MEDIUMArm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX BufferEPSS 0.3%CVE-2026-102639HIGHMobilityDB through 1.3.0 Out-of-bounds Read DoS via WKB DeserializationEPSS 0.3%CVE-2026-49840CRITICALFreeSWITCH: Pre-authentication heap buffer overflow in libesl `Content-Length` parsingEPSS 0.3%CVE-2026-55737MEDIUMHeap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoderEPSS 0.3%CVE-2025-65495HIGHInteger signedness error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of EPSS 0.3%CVE-2025-30646HIGHJunos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crashEPSS 0.3%CVE-2026-101937HIGHJunos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is usedEPSS 0.2%CVE-2026-70388HIGHMemory Corruption via Integer Underflow in Message Length ValidationEPSS 0.2%CVE-2026-18444MEDIUMInteger Conversion Vulnerability Resulting in an Out of Bounds Read in NI LabVIEWEPSS 0.2%CVE-2026-82943MEDIUMOut-of-Bounds Read via Unchecked Length ValuesEPSS 0.2%CVE-2023-28063MEDIUM Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could poEPSS 0.2%CVE-2026-110735LOWGodot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader (core/io/resource_format_binary.cpp, ResourceLoaderBEPSS 0.2%CVE-2026-115921MEDIUMONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required AttributeEPSS 0.1%CVE-2025-24792MEDIUMSnowflake PHP PDO Driver has a Signed-to-Unsigned Conversion ErrorEPSS 0.1%CVE-2023-33034HIGHSigned-to-unsigned conversion error in AudioEPSS 0.1%