Falhas do tipo CWE-190

1.944 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2026-72014CRITICALdrbd: reject data replies with an out-of-range payload sizeEPSS 0.7%CVE-2022-26073HIGHA denial of service vulnerability exists in the libxm_av.so DemuxCmdInBuffer functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crEPSS 0.7%CVE-2026-24214HIGHNVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an integer overflow. A successful EPSS 0.7%CVE-2025-64721CRITICALSandboxie's Integer Overflow in SbieIniServer::RC4Crypt allows sandbox escape and SYSTEM compromiseEPSS 0.7%CVE-2023-47994HIGHAn integer overflow vulnerability in LoadPixelDataRLE4 function in PluginBMP.cpp in Freeimage 3.18.0 allows attackers to obtain sensitive inEPSS 0.7%CVE-2023-47992HIGHAn integer overflow vulnerability in FreeImageIO.cpp::_MemoryReadProc in FreeImage 3.18.0 allows attackers to obtain sensitive information, EPSS 0.7%CVE-2026-68158CRITICALlibceph: Fix multiplication overflow in decode_new_up_state_weight()EPSS 0.7%CVE-2025-49689HIGHMicrosoft Virtual Hard Disk Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2023-26065CRITICALCertain Lexmark devices through 2023-02-19 have an Integer Overflow.EPSS 0.7%CVE-2026-19313CRITICALFireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code ExecutionEPSS 0.7%CVE-2026-71331HIGHWindows Device Health Attestation (DHA) Remote Code Execution VulnerabilityEPSS 0.7%CVE-2026-24660HIGHA heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw Commit d20315b. A specially crafted maliciEPSS 0.7%CVE-2026-3536HIGHInteger overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory accEPSS 0.7%CVE-2025-48002MEDIUMWindows Hyper-V Information Disclosure VulnerabilityEPSS 0.7%CVE-2026-28231MEDIUMpillow_heif Has Integer Overflow in Encode Path Buffer Validation that Leads to Heap Out-of-Bounds ReadEPSS 0.7%CVE-2022-36015MEDIUMInteger overflow in math ops in TensorFlowEPSS 0.7%CVE-2022-35940MEDIUMInt overflow in `RaggedRangeOp` in TensoflowEPSS 0.7%CVE-2026-77896MEDIUMWindows Remote Desktop Client Denial of Service VulnerabilityEPSS 0.7%CVE-2025-27918CRITICALAn issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOSEPSS 0.7%CVE-2025-4945LOWLibsoup: integer overflow in cookie expiration date handling in libsoupEPSS 0.7%