Falhas do tipo CWE-190

1.649 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2025-62171MEDIUMImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systemsEPSS 0.8%CVE-2022-23568MEDIUMInteger overflows in TensorflowEPSS 0.8%CVE-2026-20889CRITICALA heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b. A specially crafted maliciEPSS 0.8%CVE-2024-40765CRITICALAn Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of SEPSS 0.8%CVE-2025-26642HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-11774HIGH389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflowEPSS 0.8%CVE-2024-30064HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2022-21729MEDIUMOverflow and uncaught divide by zero in TensorflowEPSS 0.8%CVE-2022-21738MEDIUMInteger overflow leading to crash in TensorflowEPSS 0.8%CVE-2022-23575MEDIUMInteger overflow in TensorflowEPSS 0.8%CVE-2022-34481HIGHIn the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have occurred when the number of elements to replEPSS 0.8%CVE-2022-23576MEDIUMInteger overflow in TensorflowEPSS 0.8%CVE-2026-43618MEDIUMRsync < 3.4.3 Integer Overflow Information DisclosureEPSS 0.8%CVE-2025-66168MEDIUMApache ActiveMQ, Apache ActiveMQ All Module, Apache ActiveMQ MQTT Module: MQTT control packet remaining length field is not properly validatedEPSS 0.8%CVE-2019-5040HIGHAn exploitable information disclosure vulnerability exists in the Weave MessageLayer parsing of Openweave-core version 4.0.2 and Nest Cam IQEPSS 0.8%CVE-2023-35967CRITICALTwo heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A speEPSS 0.8%CVE-2023-35968CRITICALTwo heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A speEPSS 0.8%CVE-2026-4690CRITICALSandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM componentEPSS 0.8%CVE-2023-35966CRITICALTwo heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafteEPSS 0.8%CVE-2023-35965CRITICALTwo heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafteEPSS 0.8%