Falhas do tipo CWE-190

1.661 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2026-62699MEDIUMWindows Universal Disk Format File System Driver (UDFS) Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-79292HIGHInteger overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process toEPSS 0.4%CVE-2026-91728CRITICALInteger overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a EPSS 0.4%CVE-2026-11725HIGHIBM MQ queue manager is vulnerable to privilege escalationEPSS 0.4%CVE-2026-58641HIGH.NET Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2025-65865HIGHAn integer overflow in eProsima Fast-DDS v3.3 allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS 0.4%CVE-2026-62886HIGH.NET Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-33662HIGHOP-TEE: RSASSA EMSA- PKCS1-v1_5 underflow in emsa_pkcs1_v1_5_encode()EPSS 0.4%CVE-2024-36474HIGHAn integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library (EPSS 0.4%CVE-2026-68889HIGHMicrosoft Standard XPS Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-19001CRITICALMongoDB BI Connector ODBC driver may write outside an allocated buffer when handling oversized catalog object namesEPSS 0.4%CVE-2026-55648MEDIUMFreeRDP: Integer Overflow in `freerdp_image_copy_from_icon_data` Bypasses Bounds CheckEPSS 0.4%CVE-2025-62467HIGHWindows Projected File System Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-86289MEDIUMOllama GGUF Decoder gguf.go readGGUFV1String integer overflowEPSS 0.4%CVE-2024-20795HIGHAnimate has an arbitrary code execution vulnerability when parsing svg filesEPSS 0.4%CVE-2026-69419HIGHAzure Data Manager for Energy Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-54226MEDIUMApache Kvrocks: RESTORE IntSet Integer Overflow Leads to Remote DoSEPSS 0.4%CVE-2024-51540HIGHDell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticatEPSS 0.4%CVE-2024-51737HIGHRediSearch Integer Overflow with LIMIT or KNN arguments can lead to RCEEPSS 0.4%CVE-2026-84536MEDIUMAn integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS TaEPSS 0.4%