Fallos del tipo CWE-681

90 resultados

Conversão incorreta entre tipos numéricos

Ocorre quando o código converte um número de um tipo para outro (ex: int para char, long para int) sem validar se o valor cabe no tipo destino, causando truncamento, overflow ou underflow. Isso pode levar a cálculos incorretos, desvios lógicos ou até execução de código malicioso.

Ejemplo

Um desenvolvedor recebe um tamanho de buffer como long vindo de uma requisição e o converte diretamente para int sem checar. Se o valor for maior que INT_MAX, o int resultante fica negativo ou muito pequeno, e a alocação de memória falha ou aloca menos espaço que o esperado, criando um buffer overflow.

Cómo mitigar

Sempre validar o valor antes de converter: verificar se ele está dentro do intervalo válido do tipo destino. Use bibliotecas ou funções seguras que detectam overflow (como __builtin_add_overflow em C, ou métodos nativos de linguagens mais modernas), e favoreça tipos maiores quando a origem é desconhecida.

CVE-2026-26178HIGHWindows Advanced Rasterization Platform Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-82522MEDIUMlibjxl < 0.12.0 Container Box Parser Integer Underflow via 32-bit Size TruncationEPSS 0.4%CVE-2026-88366HIGHNanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in nsvg__pathArcTo() when parsing SVG arc commands. A speciaEPSS 0.4%CVE-2026-6426MEDIUMQemu-kvm: vhost inflight migration vmstate integer type mismatch causes out-of-bounds accessEPSS 0.4%CVE-2026-19879MEDIUMIo.undertow/undertow: undertow: http response header integrity issue due to character truncationEPSS 0.4%CVE-2026-88368HIGHNanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in the rasterizer's nsvg__addActive() function. A specially EPSS 0.4%CVE-2026-21688HIGHiccDEV has Type Confusion in SIccCalcOp::ArgsPushed() at IccProfLib/IccMpeCalc.cppEPSS 0.4%CVE-2026-21693HIGHiccDEV has Type Confusion in CIccSegmentedCurveXml::ToXml() at IccXML/IccLibXML/IccMpeXml.cppEPSS 0.4%CVE-2026-118769CRITICALBotan: Integer overflow when reporting block size in FFI can cause memory corruptionEPSS 0.4%CVE-2026-83872HIGHWindows TCP/IP Local Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-114654MEDIUMBSON output corruption via out-of-range binary subtype bypassing UUID and OldBinary guardsEPSS 0.3%CVE-2026-34945LOWWasmtime leaks host data with 64-bit tables and WinchEPSS 0.3%CVE-2026-50402HIGHNTFS Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2025-71002MEDIUMA floating-point exception (FPE) in the flow.column_stack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) viEPSS 0.3%CVE-2026-84963MEDIUMSilent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parserEPSS 0.3%CVE-2026-107224MEDIUMExcelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReaderEPSS 0.3%CVE-2026-9143MEDIUMIncorrect Conversion between Numeric Types in NI grpc-device due to missing range checks in CodeGenEPSS 0.3%CVE-2022-0322—A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel with a EPSS 0.3%CVE-2026-88367MEDIUMNanoSVG 239e102ec contains an incorrect numeric conversion vulnerability in nsvg__curveDivs() during SVG stroke rasterization. A specially cEPSS 0.3%CVE-2026-4931MEDIUMCVE-2026-4931EPSS 0.3%