Falhas do tipo CWE-681

90 resultados

Conversão incorreta entre tipos numéricos

Ocorre quando o código converte um número de um tipo para outro sem validar se o valor cabe no novo tipo ou se a conversão preserva a semântica esperada. Um inteiro grande pode virar negativo, um float pode perder precisão, ou um valor assinado vira sem-sinal — causando lógica quebrada, buffer overflow ou bypass de validações.

Exemplo

Um validador verifica se um tamanho de buffer é menor que 1000 (int assinado). Se receber -2147483648 (int mínimo) e converter para size_t sem-sinal, vira um número gigante e o malloc aloca muito pouco, causando overflow.

Como mitigar

Sempre validar o intervalo antes de converter; usar tipos consistentes em comparações críticas; ferramentas estáticas (clang-analyzer, SonarQube) detectam conversões suspeitas; preferir bibliotecas seguras que encapsulam conversões numéricas.

CVE-2024-32481MEDIUMvyper's range(start, start + N) reverts for negative numbersEPSS 0.8%CVE-2023-21736HIGHMicrosoft Office Visio Remote Code Execution VulnerabilityEPSS 0.7%CVE-2026-69438HIGHMicrosoft JScript Remote Code Execution VulnerabilityEPSS 0.7%CVE-2024-1552HIGHIncorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.*Note:* This issue only affects EPSS 0.7%CVE-2026-25989HIGHImageMagick has integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoderEPSS 0.7%CVE-2022-40225MEDIUMA vulnerability has been identified in SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (EPSS 0.6%CVE-2021-3444HIGHLinux kernel bpf verifier incorrect mod32 truncationEPSS 0.6%CVE-2023-23401HIGHWindows Media Remote Code Execution VulnerabilityEPSS 0.6%CVE-2025-53733HIGHMicrosoft Word Remote Code Execution VulnerabilityEPSS 0.5%CVE-2025-24059HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-24174HIGHNVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request to the sEPSS 0.5%CVE-2026-77412HIGHRabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP ClientEPSS 0.5%CVE-2025-58063HIGHCoreDNS: DNS Cache Pinning via etcd Lease ID ConfusionEPSS 0.5%CVE-2026-4602HIGHVersions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to handling negative exponeEPSS 0.5%CVE-2024-7747MEDIUMWallet for WooCommerce <= 1.5.6 - Authenticated (Subscriber+) Incorrect Conversion between Numeric TypesEPSS 0.5%CVE-2023-29346HIGHNTFS Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-53923MEDIUMvLLM GGUF Kernels: int64_t to int truncation of tensor dimensions causes GPU buffer overflowEPSS 0.5%CVE-2026-55768HIGHGoAccess WebSocket Server: Signed 32 bit truncation of the 64 bit frame length causes a remote pre-authentication denial of serviceEPSS 0.5%CVE-2026-55123HIGHMicrosoft PowerPoint Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-88362HIGHMuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c. A specially crafted JavaScript input contEPSS 0.4%