Falhas do tipo CWE-190

1.956 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2023-23417HIGHWindows Partition Management Driver Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-42217MEDIUMOpenEXR: Shift exponent overflow in `readVariableLengthInteger()` (`ImfIDManifest.cpp`)EPSS 0.4%CVE-2026-52967HIGHsmb/client: fix possible infinite loop and oob read in symlink_data()EPSS 0.4%CVE-2026-54240HIGHlibde265: Pixel accessor signed integer overflow causes heap OOB read/writeEPSS 0.4%CVE-2026-107348MEDIUMInteger overflow causes an infinite loop in message buffer growth in PgBouncerEPSS 0.4%CVE-2026-102504HIGHImager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw_datachannels value in i_readraw_wiolEPSS 0.4%CVE-2023-4424HIGHbt: hci: DoS and possible RCEEPSS 0.4%CVE-2026-52722HIGHGstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handlingEPSS 0.4%CVE-2026-117993HIGHInteger overflow in the Graphics: Text componentEPSS 0.4%CVE-2026-118370HIGHlibexpat through 2.9.0 Integer Overflow in storeAtts via attIndex and nPrefixesEPSS 0.4%CVE-2022-2454HIGHInteger Overflow or Wraparound in gpac/gpacEPSS 0.4%CVE-2026-58472MEDIUMGNU Wget 1.25.0 Heap Buffer Overflow via HTML Attribute EncodingEPSS 0.4%CVE-2026-88372HIGHlibsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.EPSS 0.4%CVE-2025-0101MEDIUMWAGO: Year 2038 problemEPSS 0.4%CVE-2021-20224—An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c. Function calls to GeEPSS 0.4%CVE-2026-88351CRITICALAn integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms. When parsing a specially crafted MessagePEPSS 0.4%CVE-2023-35057HIGHAn integer overflow vulnerability exists in the LXT2 lxt2_rd_trace value elements allocation functionality of GTKWave 3.3.115. A specially cEPSS 0.4%CVE-2026-31662HIGHtipc: fix bc_ackers underflow on duplicate GRP_ACK_MSGEPSS 0.4%CVE-2024-51540HIGHDell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticatEPSS 0.4%CVE-2024-46953HIGHAn issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format strinEPSS 0.4%