Weaknesses of type CWE-680

112 results

Overflow de inteiro levando a estouro de buffer

Ocorre quando um cálculo de inteiro ultrapassa o limite máximo do tipo (overflow), resultando num valor menor do que o esperado. Esse valor comprometido é então usado para alocar ou indexar um buffer, permitindo escrita ou leitura além dos limites e causando corrupção de memória ou execução de código arbitrário.

Example

Um código calcula o tamanho de um buffer como 'tamanho_usuario + 100'. Se tamanho_usuario for INT_MAX, a soma sofre overflow e vira um número negativo ou muito pequeno; o buffer é alocado com apenas alguns bytes, mas o programa escreve dados como se tivesse centenas, sobrescrevendo memória adjacente.

How to mitigate

Valide limites de entrada antes de operações aritméticas (verifique se a soma ultrapassaria o máximo permitido), use tipos inteiros sem sinal quando apropriado, e prefira bibliotecas de alocação dinâmica que verificam transbordos. Em linguagens de alto nível, o risco é menor, mas em C/C++ é crítico usar funções como safe_add ou checagens explícitas.

CVE-2024-6381MEDIUMMongoDB C Driver bson_strfreev may be susceptible to integer overflowEPSS 0.4%CVE-2024-2608HIGH`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()` could have experienced integer overflows,EPSS 0.4%CVE-2024-21454HIGHInteger Overflow to Buffer Overflow in Automotive TelematicsEPSS 0.4%CVE-2024-58107HIGHBuffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.4%CVE-2024-48877HIGHA memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A speciallEPSS 0.3%CVE-2025-53630HIGHInteger Overflow in GGUF Parser can lead to Heap Out-of-Bounds Read/Write in ggufEPSS 0.3%CVE-2022-36765HIGHInteger Overflow in CreateHobEPSS 0.3%CVE-2024-55626LOWSuricata oversized bpf file can lead to buffer overflowEPSS 0.2%CVE-2024-57956LOWOut-of-bounds read vulnerability in the interpreter string module Impact: Successful exploitation of this vulnerability may affect availabilEPSS 0.2%CVE-2026-81647MEDIUMOut-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.2%CVE-2023-22305MEDIUMInteger overflow in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of seEPSS 0.2%CVE-2026-19588MEDIUMInteger Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.EPSS 0.2%CVE-2023-22443MEDIUMInteger overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable denial of service via EPSS 0.2%CVE-2023-33022HIGHInteger Overflow to Buffer Overflow in HLOSEPSS 0.2%CVE-2025-54623MEDIUMOut-of-bounds read vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.2%CVE-2026-43627HIGHllama.cpp b1283–b9058 Integer Overflow in llama_batch_init() FunctionEPSS 0.1%CVE-2026-90783HIGHMKVToolNix through 101.0 Heap Buffer Overflow via avilib ODML Superindex Integer WraparoundEPSS 0.1%CVE-2023-28585HIGHInteger Overflow to Buffer Overflow in TZ Secure OSEPSS 0.1%CVE-2022-25705HIGHInteger Overflow to Buffer Overflow in ModemEPSS 0.1%CVE-2022-33248HIGHInteger overflow to buffer overflow in User Identity ModuleEPSS 0.1%