Falhas do tipo CWE-190

1.670 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2026-72854MEDIUMmsgpack-c Integer Overflow in msgpack_unpacker_expand_buffer Causes a False-Success Undersized ReservationEPSS 0.2%CVE-2024-36328HIGHInteger overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss of integrity or avaiEPSS 0.2%CVE-2025-2574LOWOut-of-bounds array write in Xpdf 4.05 due to incorrect integer overflow checkingEPSS 0.2%CVE-2026-55373MEDIUMOpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample countsEPSS 0.2%CVE-2026-21486HIGHUse After Free and Heap-based Buffer Overflow and Integer Overflow or Wraparound and Out-of-bounds Write in iccDEVEPSS 0.2%CVE-2026-19321MEDIUMPower System Integer OverflowEPSS 0.2%CVE-2023-53309MEDIUMdrm/radeon: Fix integer overflow in radeon_cs_parser_initEPSS 0.2%CVE-2023-20507LOWAn integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data inEPSS 0.2%CVE-2026-42798MEDIUMLittle CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.EPSS 0.2%CVE-2024-21851LOWDsoftbus has an integer overflow vulnerabilityEPSS 0.2%CVE-2026-47714MEDIUMlibheif has integer overflow in inline mask size calculation that causes undersized buffer allocationEPSS 0.2%CVE-2026-43894MEDIUMjq: Wild stack write via signed-integer overflow in decNumber D2U() macroEPSS 0.2%CVE-2026-45258HIGHMultiple vulnerabilities in the sound(4) mmap pathEPSS 0.2%CVE-2026-49416HIGHInteger overflow in vt(4) CONS_HISTORY ioctlEPSS 0.2%CVE-2026-33328MEDIUMPossible integer overflow on 32-bit systems when reading GIF imagesEPSS 0.2%CVE-2025-0302MEDIUMLiteos_a has an integer overflow read vulnerabilityEPSS 0.2%CVE-2026-0031HIGHIn multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalatEPSS 0.2%CVE-2026-32849MEDIUMNetBSD Signed Integer Overflow in cryptodev_op via cryptodev.cEPSS 0.2%CVE-2025-20024LOWArkcompiler Ets Runtime has an integer overflow vulnerabilityEPSS 0.2%CVE-2026-0028HIGHIn __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local esEPSS 0.2%