Falhas do tipo CWE-190

1.956 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2026-14662HIGHPostgreSQL tsvector and tsquery undersize allocations, via integer wraparoundEPSS 0.5%CVE-2026-31649CRITICALnet: stmmac: fix integer underflow in chain modeEPSS 0.5%CVE-2026-91960HIGHFreeRDP before 3.31.0 Integer Overflow Double FreeEPSS 0.5%CVE-2024-42415HIGHAn integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured FiEPSS 0.5%CVE-2024-21905MEDIUMQTS, QuTS hero, QuTScloudEPSS 0.5%CVE-2024-27101HIGHInteger overflow in chunking helper causes dispatching to miss elements or panicEPSS 0.5%CVE-2025-14178MEDIUMHeap buffer overflow in array_merge()EPSS 0.5%CVE-2026-7568MEDIUMSigned integer overflow in metaphone()EPSS 0.5%CVE-2023-2610HIGHInteger Overflow or Wraparound in vim/vimEPSS 0.5%CVE-2020-14344MEDIUMAn integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version EPSS 0.5%CVE-2024-48983HIGHAn issue was discovered in MBed OS 6.16.0. During processing of HCI packets, the software dynamically determines the length of the packet daEPSS 0.5%CVE-2025-54091HIGHWindows Hyper-V Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2017-7542—The ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel through 4.12.3 allows local users to cause a denial of servicEPSS 0.5%CVE-2025-55067HIGHInteger Overflow or Wraparound in Veeder-Root TLS4B Automatic Tank Gauge SystemEPSS 0.5%CVE-2026-50278MEDIUMiccDEV: CIccEmbedIO::Read8() size_t underflowEPSS 0.5%CVE-2021-31425HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.2-49151. An attacker muEPSS 0.5%CVE-2021-31426HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.2-49151. An attacker muEPSS 0.5%CVE-2026-100208HIGHMicrosoft Office Outlook Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-64759HIGHAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27,EPSS 0.5%CVE-2026-46325CRITICALRDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZEEPSS 0.4%