Falhas do tipo CWE-190

1.956 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2026-31659CRITICALbatman-adv: reject oversized global TT response buffersEPSS 0.4%CVE-2025-5478HIGHSony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-111074HIGHJITServer: Pre-authentication remote Denial of Service via integer overflow infinite loop in MessageBuffer::computeRequiredCapacity()EPSS 0.4%CVE-2024-39684MEDIUMTencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer OverflowEPSS 0.4%CVE-2026-53432MEDIUMInteger Overflow in fzfEPSS 0.4%CVE-2020-8874HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An attacker muEPSS 0.4%CVE-2023-39275HIGHMultiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 EPSS 0.4%CVE-2026-54417HIGHInteger Overflow in rxi/microtar mtar_next() Causes Infinite Loop DoSEPSS 0.4%CVE-2023-39317HIGHMultiple integer overflow vulnerabilities exist in the LXT2 num_dict_entries functionality of GTKWave 3.3.115. A specially crafted .lxt2 filEPSS 0.4%CVE-2026-84449LOWlibheif hOp_RGB24_32_to_YCbCr Memory Access Error / SEGVEPSS 0.4%CVE-2026-26178HIGHWindows Advanced Rasterization Platform Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2025-52935CRITICALInteger Overflow or Wraparound vulnerability in dragonflydb/dragonflyEPSS 0.4%CVE-2023-39272HIGHMultiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 EPSS 0.4%CVE-2023-39274HIGHMultiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 EPSS 0.4%CVE-2026-73558MEDIUMvLLM: Cross-User Data Leak VulnerabilityEPSS 0.4%CVE-2023-39270HIGHMultiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 EPSS 0.4%CVE-2024-10917LOWEclipse OpenJ9 might return an incorrect value in JNI function GetStringUTFLengthEPSS 0.4%CVE-2026-14677HIGHPostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparoundEPSS 0.4%CVE-2023-36864HIGHAn integer overflow vulnerability exists in the fstReaderIterBlocks2 temp_signal_value_buf allocation functionality of GTKWave 3.3.115. A spEPSS 0.4%CVE-2023-39271HIGHMultiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 EPSS 0.4%