Falhas do tipo CWE-190

1.657 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2024-55656HIGHRedisBloom Integer Overflow Remote Code Execution VulnerabilityEPSS 15.0%CVE-2018-14634HIGHAn integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otEPSS 14.7%KEVCVE-2021-32628HIGHVulnerability in handling large ziplistsEPSS 13.5%CVE-2022-35977MEDIUMInteger overflow in certain command arguments can drive Redis to OOM panicEPSS 13.5%CVE-2025-6191HIGHInteger overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory accessEPSS 11.6%CVE-2024-44087CRITICALA vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6.0 (All versions < V6.0 SPEPSS 10.9%CVE-2019-6753LOWThis vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.3.0.10826. User iEPSS 10.7%CVE-2023-36900HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 10.6%CVE-2021-44711HIGHAdobe Acrobat Reader DC annotation gestures integer overflow vulnerabilityEPSS 10.0%CVE-2019-3855HIGHAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from EPSS 9.3%CVE-2024-20698HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 8.6%CVE-2025-50404MEDIUMIntelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow. The websReadEvent function incorrectly uses the int type when EPSS 8.2%CVE-2023-23410HIGHWindows HTTP.sys Elevation of Privilege VulnerabilityEPSS 8.0%CVE-2017-8816CRITICALThe NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integerEPSS 7.8%CVE-2024-38080HIGHWindows Hyper-V Elevation of Privilege VulnerabilityEPSS 7.1%KEVCVE-2021-30952HIGHAn integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15EPSS 7.0%KEVCVE-2023-35632HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 6.5%CVE-2022-42898HIGHPAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code executionEPSS 6.4%CVE-2022-28615CRITICALRead beyond bounds in ap_strcmp_match()EPSS 6.3%CVE-2019-11048MEDIUMTemporary files are not cleaned after OOM when parsing HTTP request dataEPSS 6.3%