Falhas do tipo CWE-190

1.650 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2023-47992HIGHAn integer overflow vulnerability in FreeImageIO.cpp::_MemoryReadProc in FreeImage 3.18.0 allows attackers to obtain sensitive information, EPSS 0.7%CVE-2023-47994HIGHAn integer overflow vulnerability in LoadPixelDataRLE4 function in PluginBMP.cpp in Freeimage 3.18.0 allows attackers to obtain sensitive inEPSS 0.7%CVE-2022-26073HIGHA denial of service vulnerability exists in the libxm_av.so DemuxCmdInBuffer functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crEPSS 0.7%CVE-2023-26065CRITICALCertain Lexmark devices through 2023-02-19 have an Integer Overflow.EPSS 0.7%CVE-2026-24660HIGHA heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw Commit d20315b. A specially crafted maliciEPSS 0.7%CVE-2022-35940MEDIUMInt overflow in `RaggedRangeOp` in TensoflowEPSS 0.7%CVE-2022-36015MEDIUMInteger overflow in math ops in TensorFlowEPSS 0.7%CVE-2026-57156HIGHFreeRDP: Integer overflow leading to heap buffer overflow in Orders Delta Points parsingEPSS 0.7%CVE-2026-6664HIGHPgBouncer integer overflow in PgBouncer network packet parsingEPSS 0.7%CVE-2026-43818HIGHAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOSEPSS 0.7%CVE-2023-48236LOWoverflow in get_number in vimEPSS 0.7%CVE-2022-41325HIGHAn integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a crafEPSS 0.7%CVE-2026-63126HIGHWire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799)EPSS 0.7%CVE-2024-38215HIGHWindows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2024-36619MEDIUMFFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow when handling certainEPSS 0.7%CVE-2023-35315HIGHWindows Layer-2 Bridge Network Driver Remote Code Execution VulnerabilityEPSS 0.7%CVE-2025-52581CRITICALAn integer overflow vulnerability exists in the GDF parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa)EPSS 0.7%CVE-2026-43769CRITICALAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOSEPSS 0.7%CVE-2023-23462CRITICALLibpeconv – integer overflowEPSS 0.7%CVE-2025-4945LOWLibsoup: integer overflow in cookie expiration date handling in libsoupEPSS 0.7%