Falhas do tipo CWE-190

1.956 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2026-55043HIGHMicrosoft PowerPoint Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-81959HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-55012HIGHMicrosoft Defender Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-64903HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-54124HIGHWindows Terminal Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-58641HIGH.NET Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2020-14311MEDIUMThere is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an EPSS 0.5%CVE-2026-84487MEDIUMAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macEPSS 0.5%CVE-2021-27259HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. An attacker muEPSS 0.5%CVE-2026-87643CRITICALInteger overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary codEPSS 0.5%CVE-2026-102024HIGHJunos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP extended-nexthop-tunnel is usedEPSS 0.5%CVE-2026-101944HIGHJunos OS and Junos OS Evolved: An attacker causes a routing protocol daemon denial of service when EVPN is usedEPSS 0.5%CVE-2026-86380HIGHDell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reEPSS 0.5%CVE-2026-14662HIGHPostgreSQL tsvector and tsquery undersize allocations, via integer wraparoundEPSS 0.5%CVE-2026-38346HIGHAn integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a DenialEPSS 0.5%CVE-2026-38350HIGHAn integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a DenEPSS 0.5%CVE-2026-38348HIGHAn integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) vEPSS 0.5%CVE-2026-102036HIGHJunos OS and Junos OS Evolved: An EVPN default-gateway route burst causes l2ald denial of serviceEPSS 0.5%CVE-2026-38349HIGHAn integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a DenialEPSS 0.5%CVE-2024-23337MEDIUMjq has signed integer overflow in jv.c:jvp_array_writeEPSS 0.5%