Falhas do tipo CWE-190

1.661 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2026-38076HIGHAn integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) EPSS 0.4%CVE-2026-0988LOWGlib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()EPSS 0.4%CVE-2025-10923HIGHGIMP WBMP File Parsing Integer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-23337MEDIUMjq has signed integer overflow in jv.c:jvp_array_writeEPSS 0.4%CVE-2025-10924HIGHGIMP FF File Parsing Integer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-41142HIGHOpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public APIEPSS 0.4%CVE-2025-5914HIGHLibarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.cEPSS 0.4%CVE-2026-50299MEDIUMWindows Storage Spaces Direct Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-49168MEDIUMStorage Spaces Direct Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-50298MEDIUMWindows Spaceport.sys Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-6385MEDIUMFfmpeg: ffmpeg: denial of service and potential arbitrary code execution via signed integer overflow in dvd subtitle parserEPSS 0.4%CVE-2025-62600HIGHeprosima Fast DDS affected by Out-of-Memory in readBinaryPropertySeq via Manipulated DATA Submessage when DDS Security is enabledEPSS 0.4%CVE-2026-48502HIGHMessagePack-CSharp: Denial of service vulnerabilities can swamp the CPU or crash the process with stack and heap overflowsEPSS 0.4%CVE-2026-16369CRITICALInteger overflow in the JavaScript: WebAssembly componentEPSS 0.4%CVE-2023-36915HIGHMultiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chain_table allocation functionality of GTKWave 3.3.115. A sEPSS 0.4%CVE-2023-38620HIGHMultiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt fiEPSS 0.4%CVE-2026-19174HIGHInteger overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a cEPSS 0.4%CVE-2023-38623HIGHMultiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt fiEPSS 0.4%CVE-2026-15742HIGHPostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparoundEPSS 0.4%CVE-2023-40548HIGHShim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systemsEPSS 0.4%