Falhas do tipo CWE-190

1.956 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2026-65346HIGHAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, mEPSS 0.6%CVE-2023-28237HIGHWindows Kernel Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-45103HIGHOpenSIPS: SIP Message Smuggling via TCP Content-Length Integer OverflowEPSS 0.6%CVE-2026-43764CRITICALAn integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS TaEPSS 0.6%CVE-2026-64694CRITICALAn integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS TaEPSS 0.6%CVE-2024-23307MEDIUMInteger overflow in raid5_cache_count in Linux kernelEPSS 0.6%CVE-2026-92157MEDIUMF´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertionEPSS 0.6%CVE-2026-58152MEDIUMApache Traffic Server: Integer-handling errors in HPACK/XPACK decoding corrupt memoryEPSS 0.6%CVE-2026-8949HIGHInteger overflow in the Widget: Win32 componentEPSS 0.6%CVE-2026-34219HIGHlibp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant OverflowEPSS 0.6%CVE-2022-23562HIGHInteger overflow in TensorflowEPSS 0.6%CVE-2026-39042HIGHAn issue in MikroTIk (SIA Mikrotikls, Latvia) RouterOS 7.21.x before v.7.21.4 and 7.22.x before v.7.22.2 allows a remote attacker to cause aEPSS 0.6%CVE-2025-14512MEDIUMGlib: integer overflow in glib gio attribute escaping causes heap buffer overflowEPSS 0.6%CVE-2023-2603HIGHA vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input strEPSS 0.6%CVE-2024-42643HIGHInteger Overflow in fast_ping.c in SmartDNS Release46 allows remote attackers to cause a Denial of Service via misaligned memory access.EPSS 0.6%CVE-2024-37976MEDIUMWindows Resume Extensible Firmware Interface Security Feature Bypass VulnerabilityEPSS 0.6%CVE-2026-90596MEDIUMembedded-graphics image_raw.rs new/bytes_per_row integer overflowEPSS 0.6%CVE-2026-121382HIGHNetcore NBR100V2 auto_ac msg_aes_dec integer overflowEPSS 0.6%CVE-2026-59879HIGHImmutable.js `List` 32-bit trie overflow → unrecoverable DoSEPSS 0.6%CVE-2026-6668HIGHInteger overflow causes an infinite loop in packet buffer growth in PgBouncerEPSS 0.6%