Fallos del tipo CWE-190

1664 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um resultado que excede a capacidade máxima (ou mínima) do tipo de dado inteiro, causando um envolvimento (wraparound) silencioso para um valor inesperado. O perigo está em decisões lógicas baseadas nesse valor corrompido — validações de tamanho, cálculos de alocação de memória ou verificações de limites falham silenciosamente.

Ejemplo

Um aplicativo valida que um tamanho de upload é menor que 2GB comparando `size < 2147483648`. Um atacante fornece um valor de 2147483648 bytes em um inteiro de 32 bits com sinal; o valor sofre wraparound para -2147483648, passa na validação, e a alocação subsequente falha ou aloca memória insuficiente, levando a corrupção de heap.

Cómo mitigar

Use verificações explícitas antes de operações: validar se a adição de dois números não vai ultrapassar o limite antes de somar, preferir tipos sem sinal quando o contexto permite valores positivos apenas, ou usar bibliotecas/linguagens com aritmética segura que lançam exceções em overflow (como Python ou linguagens modernas com verificação de bounds).

CVE-2023-43826HIGHApache Guacamole: Integer overflow in handling of VNC image buffersEPSS 0.9%CVE-2021-20300—A flaw was found in OpenEXR's hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp. This flaw allows an attacker who can submit a crafteEPSS 0.9%CVE-2021-27411MEDIUMMicrium OS Integer Overflow or WraparoundEPSS 0.9%CVE-2026-25173HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 0.9%CVE-2020-27776—A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could triEPSS 0.9%CVE-2023-4398HIGHAn integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware EPSS 0.9%CVE-2021-3933—An integer overflow could occur when OpenEXR processes a crafted file on systems where size_t < 64 bits. This could cause an invalid bytesPeEPSS 0.9%CVE-2026-85438CRITICALMOOS-IvP through 24.8.1 Out-of-Bounds Write via Unvalidated IvP Payload CountsEPSS 0.9%CVE-2024-49078MEDIUMWindows Mobile Broadband Driver Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2025-5449MEDIUMLibssh: integer overflow in libssh sftp server packet length validation leading to denial of serviceEPSS 0.9%CVE-2023-30463HIGHAltran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because of an integer overflow in pico_ipv6_alloc wEPSS 0.9%CVE-2024-31031HIGHAn issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integeEPSS 0.9%CVE-2024-25366MEDIUMBuffer Overflow vulnerability in mz-automation.de libiec61859 v.1.4.0 allows a remote attacker to cause a denial of service via the mmsServeEPSS 0.9%CVE-2021-27421HIGHNXP MCUXpresso SDK Integer Overflow or WraparoundEPSS 0.9%CVE-2024-30012MEDIUMWindows Mobile Broadband Driver Remote Code Execution VulnerabilityEPSS 0.9%CVE-2020-7872HIGHDaviewIndy v8.98.7.0 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed format file that EPSS 0.9%CVE-2020-7860HIGHUnEGG v0.5 and eariler versions have a Integer overflow vulnerability, triggered when the user opens a malformed specific file that is mishaEPSS 0.9%CVE-2025-53518CRITICALAn integer overflow vulnerability exists in the ABF parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa)EPSS 0.9%CVE-2024-30072HIGHMicrosoft Event Trace Log File Parsing Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-75538HIGHA Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated PeerEPSS 0.9%