Weaknesses of type CWE-472

167 results

Estouro de inteiro

Ocorre quando uma operação aritmética produz um valor que ultrapassa o limite máximo (ou mínimo) que um tipo inteiro consegue representar, causando wrap-around silencioso ou comportamento inesperado. Um inteiro que deveria ser 2.147.483.648 vira -2.147.483.648 em um int de 32 bits, por exemplo. Isso pode levar a alocações de memória pequenas demais, comparações erradas ou lógica de negócio quebrada.

Example

Uma API recebe `tamanho_total = tamanho_header + tamanho_payload`. Se um atacante passa tamanho_header=INT_MAX e tamanho_payload=1000, a soma estoura e resulta em um número negativo ou muito pequeno, alocando um buffer insuficiente. O código então escreve dados além dos limites alocados.

How to mitigate

Validar limites antes de operações aritméticas (checar se a+b > MAX_INT antes de somar), usar tipos com range maior (long, BigInteger), ou usar bibliotecas que detectam overflow. Em C/C++, preferir operações que retornam erro em caso de overflow (ex: __builtin_add_overflow no GCC).

CVE-2026-10524HIGHCoCart < 4.9.0 - Unauthenticated Arbitrary Price ManipulationEPSS 0.4%CVE-2024-12123MEDIUMUnauthorized Modification of Ticket RequesterEPSS 0.4%CVE-2026-94374HIGHMISP: IDOR via Client-Supplied Report ID in Module Results Processing Allows Reparenting and Overwriting of Other Events' ReportsEPSS 0.4%CVE-2025-59382LOWQTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)EPSS 0.4%CVE-2026-16620HIGHWPC Name Your Price for WooCommerce < 2.2.5 - Unauthenticated Price Manipulation via Select ModeEPSS 0.4%CVE-2025-30236HIGHShearwater SecurEnvoy SecurAccess Enrol before 9.4.515 allows authentication through only a six-digit TOTP code (skipping a password check) EPSS 0.4%CVE-2026-10963HIGHInteger overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crEPSS 0.4%CVE-2026-10964HIGHInteger overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crEPSS 0.4%CVE-2026-10965HIGHInteger overflow in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox viEPSS 0.4%CVE-2026-10987HIGHInteger overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crEPSS 0.4%CVE-2026-5859HIGHInteger overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a craEPSS 0.4%CVE-2023-24373LOWWordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Bypass vulnerabilityEPSS 0.4%CVE-2025-30152MEDIUMSylius PayPal Plugin has an Order Manipulation Vulnerability after PayPal CheckoutEPSS 0.4%CVE-2025-14750HIGHExternal Control of Assumed-Immutable Web Parameter in Weintek cMT X Series HMI EasyWeb ServiceEPSS 0.3%CVE-2026-84762MEDIUMWordPress WP EasyPay plugin <= 4.5.3 - Bypass Vulnerability vulnerabilityEPSS 0.3%CVE-2026-4679HIGHInteger overflow in Fonts in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory write via a EPSS 0.3%CVE-2026-13938HIGHInteger overflow in Fonts in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform an out of bounds memory write via a cEPSS 0.3%CVE-2026-11088CRITICALInteger overflow in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to poteEPSS 0.3%CVE-2026-15045MEDIUMWallet System for WooCommerce < 2.7.10 - Customer+ Checkout Price Manipulation via Unvalidated Wallet AmountEPSS 0.3%CVE-2026-41353HIGHOpenClaw < 2026.3.22 - allowProfiles Bypass via Profile Mutation and Runtime SelectionEPSS 0.3%