Fallos del tipo CWE-190

1664 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um resultado que excede a capacidade máxima (ou mínima) do tipo de dado inteiro, causando um envolvimento (wraparound) silencioso para um valor inesperado. O perigo está em decisões lógicas baseadas nesse valor corrompido — validações de tamanho, cálculos de alocação de memória ou verificações de limites falham silenciosamente.

Ejemplo

Um aplicativo valida que um tamanho de upload é menor que 2GB comparando `size < 2147483648`. Um atacante fornece um valor de 2147483648 bytes em um inteiro de 32 bits com sinal; o valor sofre wraparound para -2147483648, passa na validação, e a alocação subsequente falha ou aloca memória insuficiente, levando a corrupção de heap.

Cómo mitigar

Use verificações explícitas antes de operações: validar se a adição de dois números não vai ultrapassar o limite antes de somar, preferir tipos sem sinal quando o contexto permite valores positivos apenas, ou usar bibliotecas/linguagens com aritmética segura que lançam exceções em overflow (como Python ou linguagens modernas com verificação de bounds).

CVE-2024-55656HIGHRedisBloom Integer Overflow Remote Code Execution VulnerabilityEPSS 15.0%CVE-2018-14634HIGHAn integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otEPSS 14.7%KEVCVE-2021-32628HIGHVulnerability in handling large ziplistsEPSS 13.5%CVE-2022-35977MEDIUMInteger overflow in certain command arguments can drive Redis to OOM panicEPSS 13.5%CVE-2025-6191HIGHInteger overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory accessEPSS 11.6%CVE-2024-44087CRITICALA vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6.0 (All versions < V6.0 SPEPSS 10.9%CVE-2019-6753LOWThis vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.3.0.10826. User iEPSS 10.7%CVE-2023-36900HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 10.6%CVE-2021-44711HIGHAdobe Acrobat Reader DC annotation gestures integer overflow vulnerabilityEPSS 10.0%CVE-2019-3855HIGHAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from EPSS 9.3%CVE-2024-20698HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 8.6%CVE-2017-8816CRITICALThe NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integerEPSS 8.5%CVE-2025-50404MEDIUMIntelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow. The websReadEvent function incorrectly uses the int type when EPSS 8.2%CVE-2023-23410HIGHWindows HTTP.sys Elevation of Privilege VulnerabilityEPSS 8.0%CVE-2024-38080HIGHWindows Hyper-V Elevation of Privilege VulnerabilityEPSS 7.1%KEVCVE-2021-30952HIGHAn integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15EPSS 7.0%KEVCVE-2023-35632HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 6.5%CVE-2017-17408—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. UserEPSS 6.5%CVE-2022-42898HIGHPAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code executionEPSS 6.4%CVE-2022-28615CRITICALRead beyond bounds in ap_strcmp_match()EPSS 6.3%