Falhas do tipo CWE-190

1.661 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2026-7568MEDIUMSigned integer overflow in metaphone()EPSS 0.5%CVE-2024-48983HIGHAn issue was discovered in MBed OS 6.16.0. During processing of HCI packets, the software dynamically determines the length of the packet daEPSS 0.5%CVE-2017-7542—The ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel through 4.12.3 allows local users to cause a denial of servicEPSS 0.5%CVE-2025-55067HIGHInteger Overflow or Wraparound in Veeder-Root TLS4B Automatic Tank Gauge SystemEPSS 0.5%CVE-2026-71331HIGHWindows Device Health Attestation (DHA) Remote Code Execution VulnerabilityEPSS 0.5%CVE-2021-31425HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.2-49151. An attacker muEPSS 0.5%CVE-2021-31426HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.2-49151. An attacker muEPSS 0.5%CVE-2026-31970HIGHHTSlib BGZF index file reader has a heap buffer overflowEPSS 0.5%CVE-2024-37305HIGHBuffer overflow in deserialization in oqs-provider EPSS 0.4%CVE-2025-55753HIGHApache HTTP Server: mod_md (ACME), unintended retry intervalsEPSS 0.4%CVE-2026-40250HIGHOpenEXR has integer overflow in DWA decoder outBufferEnd pointer arithmetic (missed variant of CVE-2026-34589)EPSS 0.4%CVE-2026-55026MEDIUMMicrosoft Office Information Disclosure VulnerabilityEPSS 0.4%CVE-2021-27259HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. An attacker muEPSS 0.4%CVE-2025-54091HIGHWindows Hyper-V Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2020-10067HIGHInteger Overflow In is_in_region Allows User Thread To Access Kernel MemoryEPSS 0.4%CVE-2026-37198HIGHAn integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted GTP pEPSS 0.4%CVE-2026-59197HIGHPillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`EPSS 0.4%CVE-2026-58050HIGHlibssh2 - Integer Overflow in publickey Subsystem Attribute AllocationEPSS 0.4%CVE-2019-11484MEDIUMInteger overflow in bson_ensure_spaceEPSS 0.4%CVE-2026-91960HIGHFreeRDP before 3.31.0 Integer Overflow Double FreeEPSS 0.4%