Falhas do tipo CWE-190

1.956 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2026-56194HIGHWindows NFS Server Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2026-70257HIGHMicrosoft Office Outlook Remote Code Execution VulnerabilityEPSS 0.9%CVE-2024-2452HIGHInteger wraparound, under-allocation, and heap buffer overflow in Eclipse ThreadX NetX Duo __portable_aligned_alloc()EPSS 0.9%CVE-2025-57803HIGHImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflowEPSS 0.9%CVE-2023-35967CRITICALTwo heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A speEPSS 0.9%CVE-2023-35968CRITICALTwo heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A speEPSS 0.9%CVE-2023-35965CRITICALTwo heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafteEPSS 0.9%CVE-2023-35966CRITICALTwo heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafteEPSS 0.9%CVE-2026-108400HIGHHEVC Video Extensions Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-25155MEDIUMInteger Overflow in several Redis commands can lead to denial of service.EPSS 0.9%CVE-2026-26111HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 0.9%CVE-2022-23587HIGHInteger overflow in TensorflowEPSS 0.9%CVE-2024-30004MEDIUMWindows Mobile Broadband Driver Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-43826HIGHApache Guacamole: Integer overflow in handling of VNC image buffersEPSS 0.9%CVE-2021-20300—A flaw was found in OpenEXR's hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp. This flaw allows an attacker who can submit a crafteEPSS 0.9%CVE-2026-15562HIGHJboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of serviceEPSS 0.9%CVE-2026-102856HIGHMicrosoft Office Visio Remote Code Execution VulnerabilityEPSS 0.9%CVE-2021-27411MEDIUMMicrium OS Integer Overflow or WraparoundEPSS 0.9%CVE-2020-27776—A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could triEPSS 0.9%CVE-2023-4398HIGHAn integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware EPSS 0.9%