Falhas do tipo CWE-190

1.956 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2024-45287CRITICALMultiple vulnerabilities in libnvEPSS 0.5%CVE-2026-17682CRITICALInteger overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to poteEPSS 0.5%CVE-2026-17717CRITICALInteger overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crEPSS 0.5%CVE-2026-31814HIGHYamux remote Panic via malformed WindowUpdate creditEPSS 0.5%CVE-2026-93866CRITICALFireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds WriteEPSS 0.5%CVE-2026-111496CRITICALApache Kafka: Kafka Streams StreamThread hang from integer overflow in stream-time punctuationEPSS 0.5%CVE-2025-21382HIGHWindows Graphics Component Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2025-24528HIGHIn MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() inEPSS 0.5%CVE-2025-3408MEDIUMNothings stb stb_dupreplace integer overflowEPSS 0.5%CVE-2022-1116HIGHInteger Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to cause memory corruption and escalate priviEPSS 0.5%CVE-2026-6679HIGHDTLS 1.3 ACK serialization heap buffer overflow via integer truncationEPSS 0.5%CVE-2023-35341MEDIUMMicrosoft DirectMusic Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-37555HIGHAn issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV codEPSS 0.5%CVE-2026-102834HIGHJavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoSEPSS 0.5%CVE-2022-1921—Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi files. Potential for aEPSS 0.5%CVE-2026-114595CRITICALInteger overflow or wraparound in EPICS BaseEPSS 0.5%CVE-2026-4985MEDIUMdloebl CGIF GIF Image cgif.c cgif_addframe integer overflowEPSS 0.5%CVE-2026-34588HIGHOpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/WriteEPSS 0.5%CVE-2026-18078MEDIUMIBM i is Affected By Denial of Service Vulnerability in Save Restore []EPSS 0.5%CVE-2026-64102CRITICALRDMA/siw: Reject MPA FPDU length underflow before signed receive mathEPSS 0.5%