Falhas do tipo CWE-680

112 resultados

Transbordamento de inteiro levando a transbordamento de buffer

Ocorre quando uma operação aritmética com inteiros ultrapassa os limites do tipo (overflow), resultando em um valor menor do que o esperado. Esse valor reduzido é então usado para alocar memória ou indexar um buffer, permitindo escrita fora dos limites. O atacante explora a discrepância entre o cálculo matemático correto e o resultado inteiro para injetar código ou corromper dados.

Exemplo

Um programa recebe o tamanho de um arquivo e calcula espaço para alocação como `tamanho + sizeof(header)`. Se tamanho é INT_MAX, a soma sofre overflow e retorna um valor pequeno; o buffer alocado fica insuficiente, e dados subsequentes são escritos além de seus limites.

Como mitigar

Valide o tamanho de entrada antes de operações aritméticas (garanta que a soma não ultrapasse o máximo do tipo). Use tipos inteiros sem sinal quando apropriado e considere bibliotecas de aritmética segura. Implemente verificações explícitas: `if (tamanho > INT_MAX - sizeof(header)) reject()` antes de alocar.

CVE-2024-6381MEDIUMMongoDB C Driver bson_strfreev may be susceptible to integer overflowEPSS 0.4%CVE-2024-2608HIGH`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()` could have experienced integer overflows,EPSS 0.4%CVE-2024-21454HIGHInteger Overflow to Buffer Overflow in Automotive TelematicsEPSS 0.4%CVE-2024-58107HIGHBuffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.4%CVE-2024-48877HIGHA memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A speciallEPSS 0.3%CVE-2025-53630HIGHInteger Overflow in GGUF Parser can lead to Heap Out-of-Bounds Read/Write in ggufEPSS 0.3%CVE-2022-36765HIGHInteger Overflow in CreateHobEPSS 0.3%CVE-2024-55626LOWSuricata oversized bpf file can lead to buffer overflowEPSS 0.2%CVE-2024-57956LOWOut-of-bounds read vulnerability in the interpreter string module Impact: Successful exploitation of this vulnerability may affect availabilEPSS 0.2%CVE-2026-81647MEDIUMOut-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.2%CVE-2023-22305MEDIUMInteger overflow in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of seEPSS 0.2%CVE-2026-19588MEDIUMInteger Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.EPSS 0.2%CVE-2023-22443MEDIUMInteger overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable denial of service via EPSS 0.2%CVE-2023-33022HIGHInteger Overflow to Buffer Overflow in HLOSEPSS 0.2%CVE-2025-54623MEDIUMOut-of-bounds read vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.2%CVE-2026-43627HIGHllama.cpp b1283–b9058 Integer Overflow in llama_batch_init() FunctionEPSS 0.1%CVE-2026-90783HIGHMKVToolNix through 101.0 Heap Buffer Overflow via avilib ODML Superindex Integer WraparoundEPSS 0.1%CVE-2023-28585HIGHInteger Overflow to Buffer Overflow in TZ Secure OSEPSS 0.1%CVE-2022-25705HIGHInteger Overflow to Buffer Overflow in ModemEPSS 0.1%CVE-2022-33248HIGHInteger overflow to buffer overflow in User Identity ModuleEPSS 0.1%