Falhas do tipo CWE-190

1.955 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2025-40906CRITICALBSON::XS versions 0.8.4 and earlier for Perl includes a bundled libbson 1.1.7, which has several vulnerabilitiesEPSS 0.6%CVE-2026-34545HIGHOpenEXR: integer overflow lead to OOB in HTJ2K decoderEPSS 0.6%CVE-2025-30405CRITICALAn integer overflow vulnerability in the loading of ExecuTorch models can cause objects to be placed outside their allocated memory area, poEPSS 0.6%CVE-2026-2762CRITICALInteger overflow in the JavaScript: Standard Library componentEPSS 0.6%CVE-2025-30404CRITICALAn integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execuEPSS 0.6%CVE-2026-89146HIGHlibp2p-rendezvous through 0.17.1 Denial of Service via Unbounded Registration TTL in Discovery ResponsesEPSS 0.6%CVE-2023-27354MEDIUMThis vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-3EPSS 0.6%CVE-2026-93577CRITICALInteger Overflow or Wraparound in GitLabEPSS 0.6%CVE-2026-37198HIGHAn integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted GTP pEPSS 0.6%CVE-2026-51536CRITICALIn OpENer 2.3.0 (commit 76b95cf) when parsing incoming CIP (Common Industrial Protocol) network packets, the length parameter is inconsistenEPSS 0.6%CVE-2024-30067MEDIUMWinlogon Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2025-0838MEDIUMHeap Buffer overflow in AbseilEPSS 0.6%CVE-2022-49279HIGHNFSD: prevent integer overflow on 32 bit systemsEPSS 0.6%CVE-2018-16301—The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability thEPSS 0.6%CVE-2026-52914CRITICALbatman-adv: fix fragment reassembly length accountingEPSS 0.6%CVE-2026-88077HIGHMicrosoft Edge (Chromium-based) Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2024-46669LOWAn Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2.10 and below; FortiSASE version 23.4.b ForEPSS 0.6%CVE-2025-14422HIGHGIMP PNM File Parsing Integer Overflow Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-20639HIGHAn integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS TaEPSS 0.6%CVE-2026-16834CRITICALVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.6%