Falhas do tipo CWE-472

154 resultados

Estouro de inteiro

Ocorre quando uma operação aritmética produz um valor que excede o intervalo máximo que o tipo inteiro pode representar, causando wraparound (volta ao negativo ou zero) ou comportamento indefinido. O resultado inesperado pode levar a alocações de memória incorretas, bypasses de validação ou corrupção de lógica crítica.

Exemplo

Um servidor calcula o tamanho de buffer como `tamanho_usuario + 100`. Se tamanho_usuario for próximo ao máximo de um inteiro de 32 bits, a soma estoura e vira um número pequeno (ou negativo), provocando alocação de buffer mínimo. O código então escreve dados além do espaço reservado, causando heap overflow.

Como mitigar

Valide entradas numéricas contra limites realistas antes de operações aritméticas; use tipos de dados com maior capacidade (64 bits) quando apropriado; implemente verificações de estouro explícitas (ex: `if (a > INT_MAX - b)`) ou prefira linguagens com checagem automática de inteiros (Rust, alguns compiladores C modernos com flags de segurança).

CVE-2026-77794MEDIUMRegistrationMagic 6.0.0.0 - 6.0.9.8 - Unauthenticated Payment Bypass via Zero QuantityEPSS 0.2%CVE-2026-85010MEDIUMRestroPress < 3.4.6 - Unauthenticated Price Manipulation via Cart Add-onsEPSS 0.2%CVE-2026-7942MEDIUMInteger overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML pagEPSS 0.2%CVE-2026-10018MEDIUMInteger overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information froEPSS 0.2%CVE-2026-10019MEDIUMInteger overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML paEPSS 0.2%CVE-2026-8567MEDIUMInteger overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory wEPSS 0.2%CVE-2026-16089MEDIUMKeycloak-services: keycloak-services: authorization codes can be retargeted to another client sessionEPSS 0.2%CVE-2026-11678MEDIUMInteger overflow in libyuv in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to obEPSS 0.2%CVE-2026-4453MEDIUMInteger overflow in Dawn in Google Chrome on Mac prior to 146.0.7680.153 allowed a remote attacker to leak cross-origin data via a crafted HEPSS 0.2%CVE-2026-8559MEDIUMInteger overflow in Internationalization in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of EPSS 0.2%CVE-2026-9998HIGHInteger overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to poteEPSS 0.2%CVE-2026-7912MEDIUMInteger overflow in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer procesEPSS 0.2%CVE-2026-11281MEDIUMInteger overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive iEPSS 0.1%CVE-2026-11290MEDIUMInteger overflow in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to cause a denial of service via a mEPSS 0.1%