Falhas do tipo CWE-190

1.413 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2019-11477HIGHInteger overflow in TCP_SKB_CB(skb)->tcp_gso_segsEPSS 98.7%CVE-2023-44443HIGHGIMP PSP File Parsing Integer Overflow Remote Code Execution VulnerabilityEPSS 93.6%CVE-2023-21716CRITICALMicrosoft Word Remote Code Execution VulnerabilityEPSS 82.3%CVE-2021-30860HIGHAn integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPaEPSS 76.0%KEVCVE-2020-13579HIGHAn exploitable integer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s PlanMaker apEPSS 72.6%CVE-2023-22458MEDIUMInteger overflow in multiple Redis commands can lead to denial-of-serviceEPSS 72.0%CVE-2024-49112CRITICALWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityEPSS 70.9%CVE-2020-6113HIGHAn exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when updatingEPSS 68.6%CVE-2015-8651HIGHInteger overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on EPSS 67.9%KEVCVE-2013-2729HIGHInteger overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitEPSS 66.6%KEVCVE-2017-7529—Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resultinEPSS 62.6%CVE-2018-6065HIGHInteger overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3EPSS 60.3%KEVCVE-2002-0391CRITICALInteger overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including diEPSS 58.1%CVE-2008-1083HIGHHeap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, ViEPSS 57.1%CVE-2022-23521CRITICALgitattributes parsing integer overflow in gitEPSS 56.3%CVE-2023-32434HIGHAn integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 andEPSS 51.5%KEVCVE-2021-23840HIGHInteger overflow in CipherUpdateEPSS 50.7%CVE-2022-23943—mod_sed: Read/write beyond boundsEPSS 50.4%CVE-2022-41903CRITICALInteger overflow in `git archive`, `git log --format` leading to RCE in gitEPSS 44.3%CVE-2020-6092HIGHAn exploitable code execution vulnerability exists in the way Nitro Pro 13.9.1.155 parses Pattern objects. A specially crafted PDF file can EPSS 42.3%