Falhas do tipo CWE-190

1.664 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2026-0080MEDIUMIn multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead toEPSS 0.3%CVE-2024-33063HIGHInteger Overflow or Wraparound in WLAN Host CommunicationEPSS 0.3%CVE-2024-21844MEDIUMInteger overflow in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable denial of service via adjacent aEPSS 0.3%CVE-2022-42259MEDIUMNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to denEPSS 0.3%CVE-2025-63938MEDIUMTinyproxy through 1.11.2 contains an integer overflow vulnerability in the strip_return_port() function within src/reqs.c.EPSS 0.3%CVE-2026-33306MEDIUMbcrypt-ruby has an Integer Overflow that Causes Zero Key-Strengthening Iterations at Cost=31 on JRubyEPSS 0.3%CVE-2023-27937HIGHAn integer overflow was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOSEPSS 0.3%CVE-2026-87630MEDIUMInteger overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a craftedEPSS 0.3%CVE-2024-21105LOWVulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11. Easily eEPSS 0.3%CVE-2022-49570MEDIUMgpio: gpio-xilinx: Fix integer overflowEPSS 0.3%CVE-2022-49387MEDIUMwatchdog: rzg2l_wdt: Fix 32bit overflow issueEPSS 0.3%CVE-2024-20434MEDIUMA vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on tEPSS 0.3%CVE-2026-16724MEDIUMPower System Integer OverflowEPSS 0.3%CVE-2026-15534MEDIUMPerl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatchEPSS 0.3%CVE-2018-9472HIGHIn xmlMemStrdupLoc of xmlmemory.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code executEPSS 0.3%CVE-2022-42263HIGHNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an Integer overflow may lead to denial EPSS 0.3%CVE-2026-0041MEDIUMIn multiple functions of ubsan_throwing_runtime.cpp, there is a possible UBSan failure due to an integer overflow. This could lead to remoteEPSS 0.3%CVE-2026-0052MEDIUMIn multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead toEPSS 0.3%CVE-2026-0040MEDIUMIn multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead toEPSS 0.3%CVE-2026-0044MEDIUMIn multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause the system to crash due to an integer overflow. This cEPSS 0.3%