Falhas do tipo CWE-190

1.661 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2024-31031HIGHAn issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integeEPSS 0.9%CVE-2024-25366MEDIUMBuffer Overflow vulnerability in mz-automation.de libiec61859 v.1.4.0 allows a remote attacker to cause a denial of service via the mmsServeEPSS 0.9%CVE-2021-27421HIGHNXP MCUXpresso SDK Integer Overflow or WraparoundEPSS 0.9%CVE-2024-30012MEDIUMWindows Mobile Broadband Driver Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-69734MEDIUMMicrosoft Office Word Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-2921HIGHGStreamer RIFF Palette Integer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2020-7860HIGHUnEGG v0.5 and eariler versions have a Integer overflow vulnerability, triggered when the user opens a malformed specific file that is mishaEPSS 0.9%CVE-2020-7872HIGHDaviewIndy v8.98.7.0 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed format file that EPSS 0.9%CVE-2025-53518CRITICALAn integer overflow vulnerability exists in the ABF parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa)EPSS 0.9%CVE-2024-30072HIGHMicrosoft Event Trace Log File Parsing Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-71336HIGHWindows Work Folder Service Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-52389CRITICALUTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::converEPSS 0.9%CVE-2023-38698MEDIUM.eth registrar controller can shorten the duration of registered namesEPSS 0.8%CVE-2025-57803HIGHImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflowEPSS 0.8%CVE-2025-5449MEDIUMLibssh: integer overflow in libssh sftp server packet length validation leading to denial of serviceEPSS 0.8%CVE-2026-2272MEDIUMGimp: gimp: memory corruption due to integer overflow in ico file handlingEPSS 0.8%CVE-2025-47294MEDIUMA integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0 through 7.0.14 may allow a remote unauthenEPSS 0.8%CVE-2026-26111HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 0.8%CVE-2024-30021MEDIUMWindows Mobile Broadband Driver Remote Code Execution VulnerabilityEPSS 0.8%CVE-2021-4206—A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc() function can lead to the allocation EPSS 0.8%