Falhas do tipo CWE-190

1.956 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2026-63209HIGHInteger Overflow or Wraparound and Out-of-bounds Write in compressEPSS 0.6%CVE-2019-5037HIGHAn exploitable denial-of-service vulnerability exists in the Weave certificate loading functionality of Nest Cam IQ Indoor camera, version 4EPSS 0.6%CVE-2026-55033HIGHMicrosoft Word Remote Code Execution VulnerabilityEPSS 0.6%CVE-2025-14308CRITICALInteger Overflow in Robocode's Buffer Write MethodEPSS 0.6%CVE-2026-68889HIGHMicrosoft Standard XPS Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2026-4775HIGHLibtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processingEPSS 0.6%CVE-2024-30212HIGHMicrochip Harmony 3 Core library allows read and write access to RAM via a SCSI READ or WRITE commandEPSS 0.6%CVE-2022-2743HIGHInteger overflow in Window Manager in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker who convinced aEPSS 0.6%CVE-2026-100136HIGHCAI Content Credentials | Integer Overflow or Wraparound (CWE-190)EPSS 0.6%CVE-2026-84544HIGHAn integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS TahEPSS 0.6%CVE-2025-26639HIGHWindows USB Print Driver Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2026-16389CRITICALIncorrect boundary conditions, integer overflow in the Libraries component in NSSEPSS 0.6%CVE-2025-36853HIGHEOL .NET 6.0 Runtime Remote Code Execution VulnerabilityEPSS 0.6%CVE-2023-38150HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2020-14363HIGHAn integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged attacker to cause an appEPSS 0.6%CVE-2026-93311MEDIUMFreedesktop Poppler SampledFunction Function.cc integer overflowEPSS 0.6%CVE-2026-10649HIGHPacemaker: pacemaker: denial of service via integer overflow in remote message decompressionEPSS 0.6%CVE-2026-54755CRITICALKlever-Go: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)EPSS 0.6%CVE-2026-87020HIGHOrthanc DICOM Server Integer Overflow or WraparoundEPSS 0.6%CVE-2026-58207HIGHNATS Server: Remote crash via integer overflow in Connz paginationEPSS 0.6%