Falhas do tipo CWE-190

1.664 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2026-23833LOWESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API componentEPSS 0.3%CVE-2023-4722MEDIUMInteger Overflow or Wraparound in gpac/gpacEPSS 0.3%CVE-2026-45527MEDIUMIn convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer oveEPSS 0.3%CVE-2026-48444MEDIUMCAI Content Credentials | Integer Overflow or Wraparound (CWE-190)EPSS 0.3%CVE-2025-65803MEDIUMAn integer overflow in the psdParser::ReadImageData function of FreeImage v3.18.0 and before allows attackers to cause a Denial of Service (EPSS 0.3%CVE-2021-3428—A flaw was found in the Linux kernel. A denial of service problem is identified if an extent tree is corrupted in a crafted ext4 filesystem EPSS 0.3%CVE-2025-66499HIGHFoxit PDF Reader PDF Parsing Heap-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2021-3607—An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs whEPSS 0.3%CVE-2022-49451HIGHfirmware: arm_scmi: Fix list protocols enumeration in the base protocolEPSS 0.3%CVE-2023-1900HIGHA vulnerability within the Avira network protection feature allowed an attacker with local execution rights to cause an overflow. This couldEPSS 0.3%CVE-2021-22677—An integer overflow exists in the APIs of the host MCU while trying to connect to a WIFI network may lead to issues such as a denial-of-servEPSS 0.3%CVE-2023-23559HIGHIn rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.EPSS 0.3%CVE-2024-7488MEDIUMBusiness Logic Error in RestApp Inc.'s Online Ordering SystemEPSS 0.3%CVE-2026-73086HIGHnanoid: Integer Overflow or WraparoundEPSS 0.3%CVE-2024-23851MEDIUMcopy_params in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INT_MAX bytes, and crash, because oEPSS 0.3%CVE-2026-59089MEDIUMGimp: gimp: denial of service via integer overflow in playstation tim loaderEPSS 0.3%CVE-2025-20710HIGHIn wlan AP driver, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximal/adjacent) escalatEPSS 0.3%CVE-2024-40635MEDIUMcontainerd has an integer overflow in User ID handlingEPSS 0.3%CVE-2026-24814CRITICALA integer overflow in swoole/swoole-srcEPSS 0.3%CVE-2018-9348HIGHIn SMF_ParseMetaEvent of eas_smf.c, there is a possible integer overflow. This could lead to remote denial of service due to resource exhausEPSS 0.3%