Falhas do tipo CWE-472

154 resultados

Estouro de inteiro

Ocorre quando uma operação aritmética produz um valor que excede o intervalo máximo que o tipo inteiro pode representar, causando wraparound (volta ao negativo ou zero) ou comportamento indefinido. O resultado inesperado pode levar a alocações de memória incorretas, bypasses de validação ou corrupção de lógica crítica.

Exemplo

Um servidor calcula o tamanho de buffer como `tamanho_usuario + 100`. Se tamanho_usuario for próximo ao máximo de um inteiro de 32 bits, a soma estoura e vira um número pequeno (ou negativo), provocando alocação de buffer mínimo. O código então escreve dados além do espaço reservado, causando heap overflow.

Como mitigar

Valide entradas numéricas contra limites realistas antes de operações aritméticas; use tipos de dados com maior capacidade (64 bits) quando apropriado; implemente verificações de estouro explícitas (ex: `if (a > INT_MAX - b)`) ou prefira linguagens com checagem automática de inteiros (Rust, alguns compiladores C modernos com flags de segurança).

CVE-2026-13281HIGHInteger overflow in Mojo in Google Chrome prior to 149.0.7827.201 allowed a remote attacker who had compromised the renderer process to poteEPSS 0.3%CVE-2026-16620HIGHWPC Name Your Price for WooCommerce < 2.2.5 - Unauthenticated Price Manipulation via Select ModeEPSS 0.3%CVE-2026-9909HIGHInteger overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execEPSS 0.3%CVE-2026-77999HIGHJoomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6EPSS 0.3%CVE-2026-4452HIGHInteger overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruptiEPSS 0.3%CVE-2026-4464HIGHInteger overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crEPSS 0.3%CVE-2026-82189HIGHJoomla Extension - j2commerce.com - Any order can be marked Failed by anyone in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7EPSS 0.3%CVE-2026-10015HIGHInteger overflow in WTF in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a EPSS 0.3%CVE-2026-8577HIGHInteger overflow in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via EPSS 0.3%CVE-2026-42655HIGHWordPress Best Payments Plugin for WP plugin <= 4.6.19 - Payment Bypass vulnerabilityEPSS 0.2%CVE-2026-11085HIGHInteger overflow in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds meEPSS 0.2%CVE-2026-11655HIGHInteger overflow in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer processEPSS 0.2%CVE-2026-94374HIGHMISP: IDOR via Client-Supplied Report ID in Module Results Processing Allows Reparenting and Overwriting of Other Events' ReportsEPSS 0.2%CVE-2025-54551MEDIUMSynapse Mobility 8.0, 8.0.1, 8.0.2, 8.1, and 8.1.1 contain a privilege escalation vulnerability through external control of Web parameter. IEPSS 0.2%CVE-2026-15149MEDIUMWP Hotel Booking < 2.3.3 - Unauthenticated Payment Bypass via Price ManipulationEPSS 0.2%CVE-2026-16067MEDIUMEvent Booking Manager for WooCommerce (Pro) < 5.0.3 - Unauthenticated Payment Bypass via Client-Controlled Ticket PriceEPSS 0.2%CVE-2026-9960HIGHInteger overflow in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to exEPSS 0.2%CVE-2026-8519HIGHInteger overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory wEPSS 0.2%CVE-2026-8573HIGHInteger overflow in Codecs in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox esEPSS 0.2%CVE-2026-11640HIGHInteger overflow in libyuv in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to poEPSS 0.2%