Weaknesses of type CWE-681

61 results

Conversão Incorreta Entre Tipos Numéricos

Ocorre quando código converte um número entre tipos (inteiro para byte, long para int, etc.) sem validar se o valor cabe no intervalo permitido pelo tipo destino. O resultado é perda de dados, overflow, underflow ou comportamento imprevisto que pode ser explorado para contornar validações de segurança.

Example

Um sistema valida que um user ID é positivo (int de 32 bits), mas depois converte para short (16 bits) sem verificar. Um ID como 40000 vira negativo após a conversão, burlando lógica de autorização que assume IDs negativos como inválidos.

How to mitigate

Sempre validar o intervalo antes de converter entre tipos numéricos; usar bibliotecas que fazem conversão segura (com exceção em overflow); considerar tipos maiores (long em vez de int) quando o valor vem de entrada externa; adicionar testes unitários que cobrem limites numéricos.

CVE-2022-34169HIGHApache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheetsEPSS 81.0%CVE-2008-3282HIGHInteger overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, EPSS 10.8%CVE-2023-46848HIGHSquid: denial of service in ftpEPSS 10.2%CVE-2024-26162HIGHMicrosoft ODBC Driver Remote Code Execution VulnerabilityEPSS 2.0%CVE-2019-14842HIGHStructured reply is a feature of the newstyle NBD protocol allowing the server to send a reply in chunks. A bounds check which was supposed EPSS 1.8%CVE-2020-4032LOWInteger casting vulnerability in `update_recv_secondary_order` in FreeRDPEPSS 1.8%CVE-2020-15225HIGHDenial of Service vulnerability in django-filterEPSS 1.8%CVE-2023-24884HIGHMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityEPSS 1.6%CVE-2023-23388HIGHWindows Bluetooth Driver Elevation of Privilege VulnerabilityEPSS 1.6%CVE-2019-10203MEDIUMPowerDNS Authoritative daemon , pdns versions 4.0.x before 4.0.9, 4.1.x before 4.1.11, exiting when encountering a serial between 2^31 and 2EPSS 1.6%CVE-2021-41272HIGHSHL, SHR, and SAR operations trigger native exception at key values in besuEPSS 1.4%CVE-2021-27478HIGHEIPStackGroup OpENer Ethernet/IP Incorrect Conversion between Numeric TypesEPSS 1.1%CVE-2020-28588MEDIUMAn information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux Kernel 5.1 Stable and 5.4.66. More specificalEPSS 1.1%CVE-2021-32996HIGHThe FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to crash. A restart is requEPSS 1.1%CVE-2024-49093HIGHWindows Resilient File System (ReFS) Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2022-40138—An integer conversion error in Hermes bytecode generation, prior to commit 6aa825e480d48127b480b08d13adf70033237097, could have been used toEPSS 0.9%CVE-2023-20006HIGHA vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco FirepEPSS 0.9%CVE-2022-36025CRITICALIncorrect Conversion between Numeric Types in Besu Ethereum ClientEPSS 0.9%CVE-2022-27189HIGHOn F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior EPSS 0.9%CVE-2024-32481MEDIUMvyper's range(start, start + N) reverts for negative numbersEPSS 0.8%