Falhas do tipo CWE-190

1.956 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2025-69204MEDIUMImageMagick converting a malicious MVG file to SVG caused an integer overflow.EPSS 0.6%CVE-2024-21631MEDIUMInteger overflow in URI leading to potential host spoofingEPSS 0.6%CVE-2019-11476MEDIUMInteger overflow in whoopsie results in out-of-bounds heap writeEPSS 0.6%CVE-2026-96943HIGHWindows Raw Image Extension Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-74977HIGHInteger overflow in the Graphics componentEPSS 0.6%CVE-2021-27417MEDIUMeCosCentric eCosPro RTOS Integer Overflow or WraparoundEPSS 0.6%CVE-2026-112519HIGHAn integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOSEPSS 0.6%CVE-2026-43405HIGHlibceph: Use u32 for non-negative values in ceph_monmap_decode()EPSS 0.6%CVE-2026-4154HIGHGIMP XPM File Parsing Integer Overflow Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-15742HIGHPostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparoundEPSS 0.6%CVE-2026-74964CRITICALInteger overflow in the Graphics componentEPSS 0.6%CVE-2026-27889HIGHNATS: Pre-auth remote server crash via WebSocket frame length overflow in wsReadEPSS 0.6%CVE-2021-20203—An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0. It may occur if a guest was to supplyEPSS 0.6%CVE-2026-57226LOWSuricata swf: heap buffer overflow in SWF decompression depth handlingEPSS 0.6%CVE-2026-11725HIGHIBM MQ queue manager is vulnerable to privilege escalationEPSS 0.6%CVE-2026-24450HIGHAn integer overflow vulnerability exists in the uncompressed_fp_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted malEPSS 0.6%CVE-2025-23327HIGHNVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer overflow through specEPSS 0.6%CVE-2026-20884HIGHAn integer overflow vulnerability exists in the deflate_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted malicious fEPSS 0.6%CVE-2026-30909CRITICALCrypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflowsEPSS 0.6%CVE-2025-6035MEDIUMGimp: gimp integer overflowEPSS 0.6%