Fallos del tipo CWE-190

1664 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um resultado que excede a capacidade máxima (ou mínima) do tipo de dado inteiro, causando um envolvimento (wraparound) silencioso para um valor inesperado. O perigo está em decisões lógicas baseadas nesse valor corrompido — validações de tamanho, cálculos de alocação de memória ou verificações de limites falham silenciosamente.

Ejemplo

Um aplicativo valida que um tamanho de upload é menor que 2GB comparando `size < 2147483648`. Um atacante fornece um valor de 2147483648 bytes em um inteiro de 32 bits com sinal; o valor sofre wraparound para -2147483648, passa na validação, e a alocação subsequente falha ou aloca memória insuficiente, levando a corrupção de heap.

Cómo mitigar

Use verificações explícitas antes de operações: validar se a adição de dois números não vai ultrapassar o limite antes de somar, preferir tipos sem sinal quando o contexto permite valores positivos apenas, ou usar bibliotecas/linguagens com aritmética segura que lançam exceções em overflow (como Python ou linguagens modernas com verificação de bounds).

CVE-2023-52389CRITICALUTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::converEPSS 0.9%CVE-2026-37555HIGHAn issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV codEPSS 0.8%CVE-2023-38698MEDIUM.eth registrar controller can shorten the duration of registered namesEPSS 0.8%CVE-2026-27889HIGHNATS: Pre-auth remote server crash via WebSocket frame length overflow in wsReadEPSS 0.8%CVE-2025-57803HIGHImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflowEPSS 0.8%CVE-2026-7568MEDIUMSigned integer overflow in metaphone()EPSS 0.8%CVE-2026-2272MEDIUMGimp: gimp: memory corruption due to integer overflow in ico file handlingEPSS 0.8%CVE-2026-69499HIGHWindows Imaging Component Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-70351HIGHMicrosoft WebP Image Extension Remote Code Execution VulnerabilityEPSS 0.8%CVE-2025-47294MEDIUMA integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0 through 7.0.14 may allow a remote unauthenEPSS 0.8%CVE-2021-4206—A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc() function can lead to the allocation EPSS 0.8%CVE-2024-30021MEDIUMWindows Mobile Broadband Driver Remote Code Execution VulnerabilityEPSS 0.8%CVE-2022-38216—An integer overflow exists in Mapbox's closed source gl-native library prior to version 10.6.1, which is bundled with multiple Mapbox producEPSS 0.8%CVE-2026-55191HIGHFreeRDP: Heap-buffer-overflow write in AVC444 YUV buffer allocationEPSS 0.8%CVE-2022-43608HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.03 EPSS 0.8%CVE-2022-21733MEDIUMMemory exhaustion in TensorflowEPSS 0.8%CVE-2021-41345HIGHStorage Spaces Controller Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2023-34399CRITICALMercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archEPSS 0.8%CVE-2025-14087MEDIUMGlib: glib: buffer underflow in gvariant parser leads to heap corruptionEPSS 0.8%CVE-2023-44709CRITICALPlutoSVG commit 336c02997277a1888e6ccbbbe674551a0582e5c4 and before was discovered to contain an integer overflow via the component plutosvgEPSS 0.8%