Falhas do tipo CWE-190

1.661 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2023-47996MEDIUMAn integer overflow vulnerability in Exif.cpp::jpeg_read_exif_dir in FreeImage 3.18.0 allows attackers to obtain information and cause a denEPSS 0.6%CVE-2023-2603HIGHA vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input strEPSS 0.6%CVE-2023-4734HIGHInteger Overflow or Wraparound in vim/vimEPSS 0.6%CVE-2024-42643HIGHInteger Overflow in fast_ping.c in SmartDNS Release46 allows remote attackers to cause a Denial of Service via misaligned memory access.EPSS 0.6%CVE-2026-3945HIGHtinyproxy Integer Overflow in HTTP Chunked Transfer-Encoding Parser Leading to Denial of ServiceEPSS 0.6%CVE-2025-14512MEDIUMGlib: integer overflow in glib gio attribute escaping causes heap buffer overflowEPSS 0.6%CVE-2025-23016CRITICALFastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLeEPSS 0.6%CVE-2025-48002MEDIUMWindows Hyper-V Information Disclosure VulnerabilityEPSS 0.6%CVE-2025-14308CRITICALInteger Overflow in Robocode's Buffer Write MethodEPSS 0.6%CVE-2020-14363HIGHAn integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged attacker to cause an appEPSS 0.6%CVE-2025-6035MEDIUMGimp: gimp integer overflowEPSS 0.6%CVE-2026-17705HIGHInteger overflow in libxml in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via EPSS 0.6%CVE-2019-5037HIGHAn exploitable denial-of-service vulnerability exists in the Weave certificate loading functionality of Nest Cam IQ Indoor camera, version 4EPSS 0.6%CVE-2026-55033HIGHMicrosoft Word Remote Code Execution VulnerabilityEPSS 0.6%CVE-2024-30212HIGHMicrochip Harmony 3 Core library allows read and write access to RAM via a SCSI READ or WRITE commandEPSS 0.6%CVE-2026-24450HIGHAn integer overflow vulnerability exists in the uncompressed_fp_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted malEPSS 0.6%CVE-2026-20884HIGHAn integer overflow vulnerability exists in the deflate_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious fEPSS 0.6%CVE-2026-33040HIGHlibp2p-rust: Gossipsub PRUNE.backoff Duration OverflowEPSS 0.6%CVE-2025-36853HIGHEOL .NET 6.0 Runtime Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-16389CRITICALIncorrect boundary conditions, integer overflow in the Libraries component in NSSEPSS 0.6%