Weaknesses of type CWE-472

154 results

Estouro de inteiro

Ocorre quando uma operação aritmética produz um valor que ultrapassa o limite máximo (ou mínimo) que um tipo inteiro consegue representar, causando wrap-around silencioso ou comportamento inesperado. Um inteiro que deveria ser 2.147.483.648 vira -2.147.483.648 em um int de 32 bits, por exemplo. Isso pode levar a alocações de memória pequenas demais, comparações erradas ou lógica de negócio quebrada.

Example

Uma API recebe `tamanho_total = tamanho_header + tamanho_payload`. Se um atacante passa tamanho_header=INT_MAX e tamanho_payload=1000, a soma estoura e resulta em um número negativo ou muito pequeno, alocando um buffer insuficiente. O código então escreve dados além dos limites alocados.

How to mitigate

Validar limites antes de operações aritméticas (checar se a+b > MAX_INT antes de somar), usar tipos com range maior (long, BigInteger), ou usar bibliotecas que detectam overflow. Em C/C++, preferir operações que retornam erro em caso de overflow (ex: __builtin_add_overflow no GCC).

CVE-2026-5870HIGHInteger overflow in Skia in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a EPSS 0.3%CVE-2025-43002MEDIUMMissing Authorization check in SAP S4/HANA (OData meta-data property)EPSS 0.3%CVE-2025-26312MEDIUMSendQuick Entera devices before 11HF5 are vulnerable to CAPTCHA bypass by removing the Captcha parameter.EPSS 0.3%CVE-2026-14069MEDIUMInteger overflow in WebNN in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information fromEPSS 0.3%CVE-2026-13974HIGHInteger overflow in Safe Browsing in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictionsEPSS 0.3%CVE-2026-10921HIGHInteger overflow in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potenEPSS 0.3%CVE-2026-10924HIGHInteger overflow in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process toEPSS 0.3%CVE-2025-31333MEDIUMOdata meta-data tampering in SAP S4CORE entityEPSS 0.3%CVE-2026-11044MEDIUMInteger overflow in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive informatiEPSS 0.3%CVE-2026-14391MEDIUMInteger overflow in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer procEPSS 0.3%CVE-2026-7896HIGHInteger overflow in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially exploit heap corruption via a craEPSS 0.3%CVE-2026-11171HIGHInteger overflow in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via aEPSS 0.3%CVE-2026-8532HIGHInteger overflow in XML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a EPSS 0.3%CVE-2026-11211HIGHInteger overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crEPSS 0.3%CVE-2026-9968HIGHInteger overflow in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a cEPSS 0.3%CVE-2025-10892HIGHInteger overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a craftEPSS 0.3%CVE-2025-31327MEDIUMOData meta-data property entity tampering in SAP Field LogisticsEPSS 0.3%CVE-2026-10524HIGHCoCart < 4.9.0 - Unauthenticated Arbitrary Price ManipulationEPSS 0.3%CVE-2025-32816LOWCodeLit CourseLit before 0.57.5 allows Parameter Tampering via a payment plan associated with the wrong entity.EPSS 0.3%CVE-2026-7340MEDIUMInteger overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker to perform an out of bounds memory rEPSS 0.3%