Falhas do tipo CWE-681

72 resultados

Conversão incorreta entre tipos numéricos

Ocorre quando o código converte um número de um tipo para outro sem validar se o valor cabe no novo tipo ou se a conversão preserva a semântica esperada. Um inteiro grande pode virar negativo, um float pode perder precisão, ou um valor assinado vira sem-sinal — causando lógica quebrada, buffer overflow ou bypass de validações.

Exemplo

Um validador verifica se um tamanho de buffer é menor que 1000 (int assinado). Se receber -2147483648 (int mínimo) e converter para size_t sem-sinal, vira um número gigante e o malloc aloca muito pouco, causando overflow.

Como mitigar

Sempre validar o intervalo antes de converter; usar tipos consistentes em comparações críticas; ferramentas estáticas (clang-analyzer, SonarQube) detectam conversões suspeitas; preferir bibliotecas seguras que encapsulam conversões numéricas.

CVE-2026-21693HIGHiccDEV has Type Confusion in CIccSegmentedCurveXml::ToXml() at IccXML/IccLibXML/IccMpeXml.cppEPSS 0.4%CVE-2026-55768HIGHGoAccess WebSocket Server: Signed 32 bit truncation of the 64 bit frame length causes a remote pre-authentication denial of serviceEPSS 0.4%CVE-2026-50402HIGHNTFS Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-34945LOWWasmtime leaks host data with 64-bit tables and WinchEPSS 0.3%CVE-2026-9143MEDIUMIncorrect Conversion between Numeric Types in NI grpc-device due to missing range checks in CodeGenEPSS 0.3%CVE-2022-0322—A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel with a EPSS 0.3%CVE-2025-71002MEDIUMA floating-point exception (FPE) in the flow.column_stack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) viEPSS 0.3%CVE-2026-4931MEDIUMCVE-2026-4931EPSS 0.3%CVE-2026-6426MEDIUMQemu-kvm: vhost inflight migration vmstate integer type mismatch causes out-of-bounds accessEPSS 0.2%CVE-2026-19879MEDIUMIo.undertow/undertow: undertow: http response header integrity issue due to character truncationEPSS 0.2%CVE-2026-82522MEDIUMlibjxl < 0.12.0 Container Box Parser Integer Underflow via 32-bit Size TruncationEPSS 0.2%CVE-2026-24856HIGHiccDEV has UB runtime error in <icTagTypeSignature>EPSS 0.2%CVE-2025-10543MEDIUMIn Eclipse Paho Go MQTT v3.1 library (paho.mqtt.golang) versions <=1.5.0 UTF-8 encoded strings, passed into the library, may be incorrectly EPSS 0.2%CVE-2021-41202MEDIUMOverflow/crash in `tf.range`EPSS 0.2%CVE-2026-24192HIGHNVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion between numeric types, leadinEPSS 0.2%CVE-2026-21673HIGHiccDEV has Integer Overflow/Underflow in CIccXmlArrayType::ParseTextCountNum()EPSS 0.2%CVE-2021-29539LOWSegfault in tf.raw_ops.ImmutableConstEPSS 0.2%CVE-2026-84963MEDIUMSilent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parserEPSS 0.2%CVE-2021-37669MEDIUMCrash in NMS ops caused by integer conversion to unsigned in TensorFlowEPSS 0.2%CVE-2026-34610MEDIUMleancrypto: Integer truncation in X.509 name parser enables certificate identity impersonationEPSS 0.2%