Falhas do tipo CWE-190

1.661 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2026-87643CRITICALInteger overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary codEPSS 0.4%CVE-2025-58715HIGHWindows Speech Runtime Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2025-54804MEDIUMRussh is missing an overflow check during channel windows adjustEPSS 0.4%CVE-2026-65391HIGHAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1EPSS 0.4%CVE-2026-65390HIGHAn integer overflow was addressed with improved input validation. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS EPSS 0.4%CVE-2022-48480HIGHInteger overflow vulnerability in some phones. Successful exploitation of this vulnerability may affect service confidentiality.EPSS 0.4%CVE-2023-25662HIGHTensorFlow vulnerable to integer overflow in EditDistanceEPSS 0.4%CVE-2026-84554MEDIUMAn integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS TahEPSS 0.4%CVE-2026-42217MEDIUMOpenEXR: Shift exponent overflow in `readVariableLengthInteger()` (`ImfIDManifest.cpp`)EPSS 0.4%CVE-2026-62816HIGHWindows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-23417HIGHWindows Partition Management Driver Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2023-21704HIGHMicrosoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-0861HIGHInteger overflow in memalign leads to heap corruptionEPSS 0.4%CVE-2026-52722HIGHGstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handlingEPSS 0.4%CVE-2026-41521HIGHxrdp: lib_framebuffer_update Has Integer Overflow Heap Info Leak & ASLR BypassEPSS 0.4%CVE-2023-4424HIGHbt: hci: DoS and possible RCEEPSS 0.4%CVE-2025-55068HIGHDover Fueling Solutions ProGauge MagLink LX4 Devices Integer Overflow or WraparoundEPSS 0.4%CVE-2022-2454HIGHInteger Overflow or Wraparound in gpac/gpacEPSS 0.4%CVE-2026-30045HIGHAn integer overflow in the /nnrf-disc/v1/nf-instances component of open5gs v2.7.6 allows attackers to cause a Denial of Service (DoS) via suEPSS 0.4%CVE-2026-71393MEDIUMHeap Buffer Overflow in GNU Emacs for AndroidEPSS 0.4%