Fallos del tipo CWE-190

1664 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um resultado que excede a capacidade máxima (ou mínima) do tipo de dado inteiro, causando um envolvimento (wraparound) silencioso para um valor inesperado. O perigo está em decisões lógicas baseadas nesse valor corrompido — validações de tamanho, cálculos de alocação de memória ou verificações de limites falham silenciosamente.

Ejemplo

Um aplicativo valida que um tamanho de upload é menor que 2GB comparando `size < 2147483648`. Um atacante fornece um valor de 2147483648 bytes em um inteiro de 32 bits com sinal; o valor sofre wraparound para -2147483648, passa na validação, e a alocação subsequente falha ou aloca memória insuficiente, levando a corrupção de heap.

Cómo mitigar

Use verificações explícitas antes de operações: validar se a adição de dois números não vai ultrapassar o limite antes de somar, preferir tipos sem sinal quando o contexto permite valores positivos apenas, ou usar bibliotecas/linguagens com aritmética segura que lançam exceções em overflow (como Python ou linguagens modernas com verificação de bounds).

CVE-2023-40474HIGHGStreamer MXF File Parsing Integer Overflow Remote Code Execution VulnerabilityEPSS 1.9%CVE-2023-40475HIGHGStreamer MXF File Parsing Integer Overflow Remote Code Execution VulnerabilityEPSS 1.9%CVE-2021-3474—There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in tEPSS 1.8%CVE-2021-3475—There is a flaw in OpenEXR in versions before 3.0.0-beta. An attacker who can submit a crafted file to be processed by OpenEXR could cause aEPSS 1.8%CVE-2021-3476—A flaw was found in OpenEXR's B44 uncompression functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted filEPSS 1.8%CVE-2024-1580MEDIUMInteger overflow in VideoLAN dav1dEPSS 1.8%CVE-2025-21172HIGH.NET and Visual Studio Remote Code Execution VulnerabilityEPSS 1.8%CVE-2024-21372HIGHWindows OLE Remote Code Execution VulnerabilityEPSS 1.8%CVE-2020-10063MEDIUMRemote Denial of Service in CoAP Option Parsing Due To Integer OverflowEPSS 1.8%CVE-2021-21704MEDIUMMultiple vulnerabilities in Firebird client extensionEPSS 1.8%CVE-2021-22156CRITICALAn integer overflow vulnerability in the calloc() function of the C runtime library of affected versions of BlackBerry® QNX Software DevelopEPSS 1.8%CVE-2024-21428HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.8%CVE-2022-24354HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 prior to 1.1.4 BuEPSS 1.8%CVE-2021-27433HIGHARM mbed-ualloc memory library Integer Overflow or WraparoundEPSS 1.8%CVE-2024-38019HIGHMicrosoft Windows Performance Data Helper Library Remote Code Execution VulnerabilityEPSS 1.8%CVE-2023-21803CRITICALWindows iSCSI Discovery Service Remote Code Execution VulnerabilityEPSS 1.8%CVE-2024-21812CRITICALAn integer overflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0eEPSS 1.8%CVE-2021-22679—The affected product is vulnerable to an integer overflow while processing HTTP headers, which may allow an attacker to remotely execute codEPSS 1.8%CVE-2021-22671—Multiple integer overflow issues exist while processing long domain names, which may allow an attacker to remotely execute code on the SimplEPSS 1.8%CVE-2016-9601MEDIUMghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2_decode_gray_scale_imagEPSS 1.7%