Weaknesses of type CWE-681

72 results

Conversão Incorreta Entre Tipos Numéricos

Ocorre quando código converte um número entre tipos (inteiro para byte, long para int, etc.) sem validar se o valor cabe no intervalo permitido pelo tipo destino. O resultado é perda de dados, overflow, underflow ou comportamento imprevisto que pode ser explorado para contornar validações de segurança.

Example

Um sistema valida que um user ID é positivo (int de 32 bits), mas depois converte para short (16 bits) sem verificar. Um ID como 40000 vira negativo após a conversão, burlando lógica de autorização que assume IDs negativos como inválidos.

How to mitigate

Sempre validar o intervalo antes de converter entre tipos numéricos; usar bibliotecas que fazem conversão segura (com exceção em overflow); considerar tipos maiores (long em vez de int) quando o valor vem de entrada externa; adicionar testes unitários que cobrem limites numéricos.

CVE-2023-21736HIGHMicrosoft Office Visio Remote Code Execution VulnerabilityEPSS 0.7%CVE-2026-69438HIGHMicrosoft JScript Remote Code Execution VulnerabilityEPSS 0.7%CVE-2024-1552HIGHIncorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.*Note:* This issue only affects EPSS 0.7%CVE-2022-40225MEDIUMA vulnerability has been identified in SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (EPSS 0.6%CVE-2021-3444HIGHLinux kernel bpf verifier incorrect mod32 truncationEPSS 0.6%CVE-2026-25989HIGHImageMagick has integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoderEPSS 0.6%CVE-2023-23401HIGHWindows Media Remote Code Execution VulnerabilityEPSS 0.6%CVE-2025-53733HIGHMicrosoft Word Remote Code Execution VulnerabilityEPSS 0.5%CVE-2025-24059HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-24174HIGHNVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request to the sEPSS 0.5%CVE-2024-7747MEDIUMWallet for WooCommerce <= 1.5.6 - Authenticated (Subscriber+) Incorrect Conversion between Numeric TypesEPSS 0.5%CVE-2026-4602HIGHVersions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to handling negative exponeEPSS 0.5%CVE-2023-29346HIGHNTFS Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-53923MEDIUMvLLM GGUF Kernels: int64_t to int truncation of tensor dimensions causes GPU buffer overflowEPSS 0.5%CVE-2026-55123HIGHMicrosoft PowerPoint Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-26178HIGHWindows Advanced Rasterization Platform Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-77412HIGHRabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP ClientEPSS 0.4%CVE-2025-58063HIGHCoreDNS: DNS Cache Pinning via etcd Lease ID ConfusionEPSS 0.4%CVE-2026-53466MEDIUMImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflowEPSS 0.4%CVE-2026-21693HIGHiccDEV has Type Confusion in CIccSegmentedCurveXml::ToXml() at IccXML/IccLibXML/IccMpeXml.cppEPSS 0.4%