Falhas do tipo CWE-190

1.944 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2026-46195CRITICALsmb: client: validate dacloffset before building DACL pointersEPSS 0.7%CVE-2025-2176MEDIUMlibzvbi io-sim.c vbi_capture_sim_load_caption integer overflowEPSS 0.7%CVE-2026-71392MEDIUMInteger Overflow in GNU Emacs for AndroidEPSS 0.7%CVE-2026-71393MEDIUMHeap Buffer Overflow in GNU Emacs for AndroidEPSS 0.7%CVE-2024-37310CRITICALEVerest has an integer overflow in the "v2g_incoming_v2gtp" function EPSS 0.7%CVE-2025-70290CRITICALAn issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by mEPSS 0.7%CVE-2023-23462CRITICALLibpeconv – integer overflowEPSS 0.7%CVE-2026-41521HIGHxrdp: lib_framebuffer_update Has Integer Overflow Heap Info Leak & ASLR BypassEPSS 0.7%CVE-2024-3859MEDIUMOn 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by a malformed OpenTypEPSS 0.7%CVE-2026-76685HIGHUnauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution or Denial-of-Service in HPE Networking EdgeConnect SD-WAN GatewaysEPSS 0.7%CVE-2023-49262CRITICALBuffer overflow vulnerability in Cookie authentication fieldEPSS 0.7%CVE-2024-43641HIGHWindows Registry Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2022-21727HIGHInteger overflow in TensorflowEPSS 0.7%CVE-2026-4151HIGHGIMP ANI File Parsing Integer Overflow Remote Code Execution VulnerabilityEPSS 0.7%CVE-2025-3360LOWGlibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().EPSS 0.7%CVE-2026-25989HIGHImageMagick has integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoderEPSS 0.7%CVE-2023-47996MEDIUMAn integer overflow vulnerability in Exif.cpp::jpeg_read_exif_dir in FreeImage 3.18.0 allows attackers to obtain information and cause a denEPSS 0.7%CVE-2026-43407CRITICALlibceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()EPSS 0.7%CVE-2023-49441HIGHdnsmasq 2.9 is vulnerable to Integer Overflow via forward_query.EPSS 0.7%CVE-2026-50142HIGHlibheif: unbounded heap allocation in HEIF sequence parser (stsz fixed-size mode missing bound check)EPSS 0.7%