Falhas do tipo CWE-190

1.670 resultados

Estouro ou Envolvimento de Inteiro

Ocorre quando uma operação aritmética produz um valor que excede o limite máximo (ou mínimo) que o tipo de dado inteiro pode armazenar, causando o valor envolver-se para o lado oposto ou comportamento inesperado. Isso permite que atacantes contornem validações, aloquem memória inadequada, ou causem travamentos ao explorar essa descontinuidade.

Exemplo

Um servidor de upload limita arquivos a 2 GB verificando se size < 2147483648 (INT_MAX). Um atacante envia size=2147483648, que em inteiro de 32 bits assinado vira -2147483648. A validação passa, mas durante a alocação de buffer o sistema trata como valor negativo ou inesperado, causando falha ou bypass de proteção.

Como mitigar

Use tipos inteiros sem sinal (unsigned) ou de maior capacidade (64 bits) quando apropriado; valide entradas contra limites explícitos *antes* de operações aritméticas; utilize funções de verificação de overflow fornecidas pela linguagem ou biblioteca (ex: __builtin_add_overflow em C, SafeInt em .NET); evite conversões implícitas entre tipos.

CVE-2026-55351HIGHIn VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additioEPSS 0.1%CVE-2022-47489MEDIUMIn soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysEPSS 0.1%CVE-2023-20682MEDIUMIn wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System exEPSS 0.1%CVE-2023-20661MEDIUMIn wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System exEPSS 0.1%CVE-2023-20663MEDIUMIn wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System exEPSS 0.1%CVE-2023-20662MEDIUMIn wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System exEPSS 0.1%CVE-2021-0879HIGHIn PVRSRVBridgeRGXTDMSubmitTransfer of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that couldEPSS 0.1%CVE-2021-0883HIGHIn PVRSRVBridgeCacheOpQueue of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow oEPSS 0.1%CVE-2021-0878HIGHIn PVRSRVBridgeServerSyncGetStatus of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could EPSS 0.1%CVE-2021-0880HIGHIn PVRSRVBridgeRGXKickTA3D of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow ouEPSS 0.1%CVE-2021-0872HIGHIn PVRSRVBridgeRGXKickVRDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow ouEPSS 0.1%CVE-2021-0874HIGHIn PVRSRVBridgeDevicememHistorySparseChange of the PowerVR kernel driver, a missing size check means there is a possible integer overflow thEPSS 0.1%CVE-2021-0884HIGHIn PVRSRVBridgePhysmemImportSparseDmaBuf of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that EPSS 0.1%CVE-2021-0885HIGHIn PVRSRVBridgeSyncPrimOpTake of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allowEPSS 0.1%CVE-2023-20660MEDIUMIn wlan, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execEPSS 0.1%CVE-2021-0882HIGHIn PVRSRVBridgeRGXKickSync of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow ouEPSS 0.1%CVE-2021-0873HIGHIn PVRSRVBridgeRGXKickRS of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-EPSS 0.1%CVE-2021-0875HIGHIn PVRSRVBridgeChangeSparseMem of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could alloEPSS 0.1%CVE-2021-0881HIGHIn PVRSRVBridgeRGXKickCDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow outEPSS 0.1%CVE-2022-38680MEDIUMIn wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.EPSS 0.1%