Fallos del tipo CWE-190

1670 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um resultado que excede a capacidade máxima (ou mínima) do tipo de dado inteiro, causando um envolvimento (wraparound) silencioso para um valor inesperado. O perigo está em decisões lógicas baseadas nesse valor corrompido — validações de tamanho, cálculos de alocação de memória ou verificações de limites falham silenciosamente.

Ejemplo

Um aplicativo valida que um tamanho de upload é menor que 2GB comparando `size < 2147483648`. Um atacante fornece um valor de 2147483648 bytes em um inteiro de 32 bits com sinal; o valor sofre wraparound para -2147483648, passa na validação, e a alocação subsequente falha ou aloca memória insuficiente, levando a corrupção de heap.

Cómo mitigar

Use verificações explícitas antes de operações: validar se a adição de dois números não vai ultrapassar o limite antes de somar, preferir tipos sem sinal quando o contexto permite valores positivos apenas, ou usar bibliotecas/linguagens com aritmética segura que lançam exceções em overflow (como Python ou linguagens modernas com verificação de bounds).

CVE-2023-35057HIGHAn integer overflow vulnerability exists in the LXT2 lxt2_rd_trace value elements allocation functionality of GTKWave 3.3.115. A specially cEPSS 0.4%CVE-2024-9123HIGHInteger overflow in Skia in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform an out of bounds memory write via a crEPSS 0.4%CVE-2026-34378MEDIUMOpenEXR has a signed integer overflow in generic_unpack() when parsing EXR files with crafted negative dataWindow.min.xEPSS 0.4%CVE-2024-46953HIGHAn issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format strinEPSS 0.4%CVE-2025-63757HIGHInteger overflow vulnerability in the yuv2ya16_X_c_template function in libswscale/output.c in FFmpeg 8.0.EPSS 0.4%CVE-2021-20224—An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c. Function calls to GeEPSS 0.4%CVE-2025-2082HIGHTesla Model 3 VCSEC Integer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2025-0101MEDIUMWAGO: Year 2038 problemEPSS 0.4%CVE-2025-62599HIGHeprosima Fast DDS affected by Out-of-Memory in readPropertySeq via Manipulated DATA Submessage when DDS Security is enabledEPSS 0.4%CVE-2020-27350MEDIUMapt integer wraparoundEPSS 0.4%CVE-2023-35992HIGHAn integer overflow vulnerability exists in the FST fstReaderIterBlocks2 vesc allocation functionality of GTKWave 3.3.115, when compiled as EPSS 0.4%CVE-2023-32650HIGHAn integer overflow vulnerability exists in the FST_BL_GEOM parsing maxhandle functionality of GTKWave 3.3.115, when compiled as a 32-bit biEPSS 0.4%CVE-2026-18670HIGHVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.4%CVE-2023-35128HIGHAn integer overflow vulnerability exists in the fstReaderIterBlocks2 time_table tsec_nitems functionality of GTKWave 3.3.115. A specially crEPSS 0.4%CVE-2026-6783MEDIUMIncorrect boundary conditions, integer overflow in the Audio/Video: Playback componentEPSS 0.4%CVE-2026-34380MEDIUMOpenEXR has a signed integer overflow (undefined behavior) in undo_pxr24_impl may allow bounds-check bypass in PXR24 decompressionEPSS 0.4%CVE-2025-31203MEDIUMAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS SequEPSS 0.4%CVE-2020-10722MEDIUMA vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could resulEPSS 0.4%CVE-2020-10723MEDIUMA memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on the index of a payloadEPSS 0.4%CVE-2026-4775HIGHLibtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processingEPSS 0.4%