Fallos del tipo CWE-191

399 resultados

Subfluxo de inteiro (estouro negativo)

Ocorre quando uma operação aritmética subtrai um valor maior de um inteiro não assinado, causando wraparound: o resultado "volta" para um número muito grande em vez de ficar negativo. Um inteiro de 8 bits sem sinal (0-255), ao subtrair 1 de 0, vira 255. Isso quebra lógica de validação e pode ser explorado para contornar limites de segurança, alocar memória inadequada ou acessar áreas indevidas.

Ejemplo

Um sistema de download que valida se o tamanho solicitado cabe em buffer: se recebe tamanho=0 e subtrai um header de 10 bytes, a conta (0 - 10) em inteiro não assinado resulta em 4.294.967.286 bytes em uma arquitetura de 32 bits, enganando a validação e causando overflow no buffer.

Cómo mitigar

Sempre validar entrada antes de operações aritméticas; usar tipos assinados quando desejar representar negativos; implementar verificações de limites (p.ex., se A < B antes de calcular A - B); usar ferramentas estáticas ou sanitizers (AddressSanitizer, UBSan) para detectar wraparound em tempo de desenvolvimento.

CVE-2023-48298MEDIUMInteger underflow leading to stack overflow in FPC codec decompressionEPSS 0.6%CVE-2026-66307HIGHSkype for Business and Lync Denial of Service VulnerabilityEPSS 0.6%CVE-2023-33158HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%CVE-2020-14346—A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead EPSS 0.6%CVE-2025-2581MEDIUMxmedcon DICOM File malloc integer underflowEPSS 0.6%CVE-2020-14361—A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilegeEPSS 0.6%CVE-2022-20483HIGHIn several functions that parse avrc response in avrc_pars_ct.cc and related files, there are possible out of bounds reads due to integer ovEPSS 0.6%CVE-2024-52558MEDIUMPlanet Technology Planet WGS-804HPT Integer UnderflowEPSS 0.6%CVE-2026-59090HIGHGimp: gimp: arbitrary code execution in psd plugin due to unsigned underflowEPSS 0.6%CVE-2026-40356MEDIUMIn MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accepEPSS 0.6%CVE-2023-29349HIGHMicrosoft ODBC and OLE DB Remote Code Execution VulnerabilityEPSS 0.6%CVE-2024-20474MEDIUMA vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an unauthenticated, remoteEPSS 0.6%CVE-2020-14362—A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilegeEPSS 0.6%CVE-2026-66033HIGHlibssh2 Integer Underflow DoS via AES-GCM Cipher NegotiationEPSS 0.6%CVE-2026-13308HIGHAutel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-89028HIGHMikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndXEPSS 0.6%CVE-2025-67269HIGHAn integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to commit `ffa1d6f40bca0b0EPSS 0.5%CVE-2025-30668MEDIUMZoom Workplace Apps - NULL Pointer DereferenceEPSS 0.5%CVE-2024-0808CRITICALInteger underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a maEPSS 0.5%CVE-2026-58016HIGHGlib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"EPSS 0.5%