Fallos del tipo CWE-190

1973 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um resultado que excede a capacidade máxima (ou mínima) do tipo de dado inteiro, causando um envolvimento (wraparound) silencioso para um valor inesperado. O perigo está em decisões lógicas baseadas nesse valor corrompido — validações de tamanho, cálculos de alocação de memória ou verificações de limites falham silenciosamente.

Ejemplo

Um aplicativo valida que um tamanho de upload é menor que 2GB comparando `size < 2147483648`. Um atacante fornece um valor de 2147483648 bytes em um inteiro de 32 bits com sinal; o valor sofre wraparound para -2147483648, passa na validação, e a alocação subsequente falha ou aloca memória insuficiente, levando a corrupção de heap.

Cómo mitigar

Use verificações explícitas antes de operações: validar se a adição de dois números não vai ultrapassar o limite antes de somar, preferir tipos sem sinal quando o contexto permite valores positivos apenas, ou usar bibliotecas/linguagens com aritmética segura que lançam exceções em overflow (como Python ou linguagens modernas com verificação de bounds).

CVE-2007-1383CRITICALInteger overflow in the 16 bit variable reference counter in PHP 4 allows context-dependent attackers to execute arbitrary code by overflowiEPSS 15.4%CVE-2024-1305CRITICALtap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can useEPSS 15.4%CVE-2018-14634HIGHAn integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otEPSS 14.7%KEVCVE-2022-35977MEDIUMInteger overflow in certain command arguments can drive Redis to OOM panicEPSS 14.0%CVE-2021-32628HIGHVulnerability in handling large ziplistsEPSS 13.0%CVE-2025-6191HIGHInteger overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory accessEPSS 11.6%CVE-2024-44087CRITICALA vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6.0 (All versions < V6.0 SPEPSS 10.9%CVE-2019-6753LOWThis vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.3.0.10826. User iEPSS 10.7%CVE-2023-36900HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 10.2%CVE-2025-50404MEDIUMIntelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow. The websReadEvent function incorrectly uses the int type when EPSS 9.9%CVE-2021-44711HIGHAdobe Acrobat Reader DC annotation gestures integer overflow vulnerabilityEPSS 9.8%CVE-2019-3855HIGHAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from EPSS 9.3%CVE-2024-20698HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 8.6%CVE-2017-8816CRITICALThe NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integerEPSS 8.5%CVE-2023-23410HIGHWindows HTTP.sys Elevation of Privilege VulnerabilityEPSS 8.0%CVE-2022-37454CRITICALThe Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers toEPSS 7.4%CVE-2024-38080HIGHWindows Hyper-V Elevation of Privilege VulnerabilityEPSS 7.1%KEVCVE-2021-30952HIGHAn integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15EPSS 7.0%KEVCVE-2022-42898HIGHPAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code executionEPSS 6.9%CVE-2023-35632HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 6.5%