Falhas do tipo CWE-190

1.956 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2026-79292HIGHInteger overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process toEPSS 0.4%CVE-2025-65865HIGHAn integer overflow in eProsima Fast-DDS v3.3 allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS 0.4%CVE-2026-33662HIGHOP-TEE: RSASSA EMSA- PKCS1-v1_5 underflow in emsa_pkcs1_v1_5_encode()EPSS 0.4%CVE-2024-36474HIGHAn integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library (EPSS 0.4%CVE-2026-88412MEDIUMAn integer overflow in the _BulkInsert_ReadProperty component (/bulk_insert.c) of FalkorDB (Redis module) v4.20.1 allows attackers to cause EPSS 0.4%CVE-2026-13063MEDIUMlibmongocrypt Improper Input Validation Leading to Process TerminationEPSS 0.4%CVE-2025-58715HIGHWindows Speech Runtime Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2025-62467HIGHWindows Projected File System Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-119729MEDIUMGst-plugins-base: gst-plugins-bad: gst-plugins-base/gst-plugins-bad: integer overflow in av1 leb128 parser allows denial of serviceEPSS 0.4%CVE-2025-62599HIGHeprosima Fast DDS affected by Out-of-Memory in readPropertySeq via Manipulated DATA Submessage when DDS Security is enabledEPSS 0.4%CVE-2024-20795HIGHAnimate has an arbitrary code execution vulnerability when parsing svg filesEPSS 0.4%CVE-2023-21704HIGHMicrosoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-54226MEDIUMApache Kvrocks: RESTORE IntSet Integer Overflow Leads to Remote DoSEPSS 0.4%CVE-2026-114691MEDIUMGcc: integer wrap in `stdEPSS 0.4%CVE-2026-2588CRITICALCrypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systemsEPSS 0.4%CVE-2022-48480HIGHInteger overflow vulnerability in some phones. Successful exploitation of this vulnerability may affect service confidentiality.EPSS 0.4%CVE-2024-51737HIGHRediSearch Integer Overflow with LIMIT or KNN arguments can lead to RCEEPSS 0.4%CVE-2026-103635CRITICALApache DataSketches: datasketches-cpp: Out-of-bounds read in compact Theta sketch deserialization allows denial of service via a crafted sketchEPSS 0.4%CVE-2023-25662HIGHTensorFlow vulnerable to integer overflow in EditDistanceEPSS 0.4%CVE-2026-54240HIGHlibde265: Pixel accessor signed integer overflow causes heap OOB read/writeEPSS 0.4%