Fallos del tipo CWE-191

328 resultados

Subfluxo de inteiro (estouro negativo)

Ocorre quando uma operação aritmética subtrai um valor maior de um inteiro não assinado, causando wraparound: o resultado "volta" para um número muito grande em vez de ficar negativo. Um inteiro de 8 bits sem sinal (0-255), ao subtrair 1 de 0, vira 255. Isso quebra lógica de validação e pode ser explorado para contornar limites de segurança, alocar memória inadequada ou acessar áreas indevidas.

Ejemplo

Um sistema de download que valida se o tamanho solicitado cabe em buffer: se recebe tamanho=0 e subtrai um header de 10 bytes, a conta (0 - 10) em inteiro não assinado resulta em 4.294.967.286 bytes em uma arquitetura de 32 bits, enganando a validação e causando overflow no buffer.

Cómo mitigar

Sempre validar entrada antes de operações aritméticas; usar tipos assinados quando desejar representar negativos; implementar verificações de limites (p.ex., se A < B antes de calcular A - B); usar ferramentas estáticas ou sanitizers (AddressSanitizer, UBSan) para detectar wraparound em tempo de desenvolvimento.

CVE-2014-0497HIGHInteger underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 1EPSS 99.9%KEVCVE-2023-31102HIGHPpmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive.EPSS 71.0%CVE-2024-38063CRITICALWindows TCP/IP Remote Code Execution VulnerabilityEPSS 70.6%CVE-2023-42118HIGHExim libspf2 Integer Underflow Remote Code Execution VulnerabilityEPSS 51.8%CVE-2024-11477HIGH7-Zip Zstandard Decompression Integer Underflow Remote Code Execution VulnerabilityEPSS 22.0%CVE-2021-31956HIGHWindows NTFS Elevation of Privilege VulnerabilityEPSS 20.3%KEVCVE-2023-38162HIGHDHCP Server Service Denial of Service VulnerabilityEPSS 10.3%CVE-2025-21376HIGHWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityEPSS 9.4%CVE-2026-42980HIGHNT OS Kernel Elevation of Privilege VulnerabilityEPSS 6.9%CVE-2021-37706HIGHPotential integer underflow upon receiving STUN message in PJSIPEPSS 4.6%CVE-2023-26421HIGHZDI-CAN-19832: Adobe Acrobat Reader DC Doc Object Integer Underflow Remote Code Execution VulnerabilityEPSS 4.6%CVE-2022-24046CRITICALThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1EPSS 4.1%CVE-2020-11909CRITICALThe Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow.EPSS 3.6%CVE-2018-14817—Fuji Electric V-Server 4.0.3.0 and prior, An integer underflow vulnerability has been identified, which may allow remote code execution.EPSS 3.6%CVE-2021-21897HIGHA code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxEPSS 2.9%CVE-2023-28293HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 2.9%CVE-2019-5459—An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.EPSS 2.8%CVE-2024-30011MEDIUMWindows Hyper-V Denial of Service VulnerabilityEPSS 2.6%CVE-2019-5144HIGHAn exploitable heap underflow vulnerability exists in the derive_taps_and_gains function in kdu_v7ar.dll of Kakadu Software SDK 7.10.2. A spEPSS 2.4%CVE-2024-28933HIGHMicrosoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.4%