Falhas do tipo CWE-190

1.670 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2022-47451MEDIUMIn wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.EPSS 0.2%CVE-2026-2809MEDIUMEndpoint DLP Driver DLLEPSS 0.2%CVE-2026-6192MEDIUMuclouvain openjpeg pi.c opj_pi_initialise_encode integer overflowEPSS 0.2%CVE-2026-84517MEDIUMAn integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS TahEPSS 0.2%CVE-2024-36337HIGHInteger overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss of confidentiality, EPSS 0.2%CVE-2026-47251MEDIUMlibheif has an incomplete fix for CVE-2026-3949: integer overflow bypass in vvdec_push_data2EPSS 0.2%CVE-2026-3707MEDIUMMrNanko webp4j gif_decoder.c DecodeGifFromMemory integer overflowEPSS 0.2%CVE-2026-42308MEDIUMPillow: Integer overflow when processing fontsEPSS 0.2%CVE-2024-36336HIGHInteger overflow within the AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to a loss of confidentiaEPSS 0.2%CVE-2026-57965MEDIUMSpice-vdagent: integer overflow in udscs_write() leading to heap buffer overflowEPSS 0.2%CVE-2026-39824LOWInvoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windowsEPSS 0.2%CVE-2024-6638MEDIUMInteger Overflow Vulnerability Reading TDMS Files in LabVIEWEPSS 0.2%CVE-2024-36316MEDIUMThe integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks potentially resulting in a deniaEPSS 0.2%CVE-2026-44983HIGHsmallbitvec: Safe API Triggered Heap Buffer Overflow via Integer OverflowEPSS 0.2%CVE-2026-40962MEDIUMFFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.cEPSS 0.2%CVE-2026-65408MEDIUMAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macEPSS 0.2%CVE-2026-55373MEDIUMOpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample countsEPSS 0.2%CVE-2026-72854MEDIUMmsgpack-c Integer Overflow in msgpack_unpacker_expand_buffer Causes a False-Success Undersized ReservationEPSS 0.2%CVE-2025-2574LOWOut-of-bounds array write in Xpdf 4.05 due to incorrect integer overflow checkingEPSS 0.2%CVE-2024-36328HIGHInteger overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss of integrity or avaiEPSS 0.2%