Fallos del tipo CWE-681

61 resultados

Conversão incorreta entre tipos numéricos

Ocorre quando o código converte um número de um tipo para outro (ex: int para char, long para int) sem validar se o valor cabe no tipo destino, causando truncamento, overflow ou underflow. Isso pode levar a cálculos incorretos, desvios lógicos ou até execução de código malicioso.

Ejemplo

Um desenvolvedor recebe um tamanho de buffer como long vindo de uma requisição e o converte diretamente para int sem checar. Se o valor for maior que INT_MAX, o int resultante fica negativo ou muito pequeno, e a alocação de memória falha ou aloca menos espaço que o esperado, criando um buffer overflow.

Cómo mitigar

Sempre validar o valor antes de converter: verificar se ele está dentro do intervalo válido do tipo destino. Use bibliotecas ou funções seguras que detectam overflow (como __builtin_add_overflow em C, ou métodos nativos de linguagens mais modernas), e favoreça tipos maiores quando a origem é desconhecida.

CVE-2022-34169HIGHApache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheetsEPSS 81.0%CVE-2008-3282HIGHInteger overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, EPSS 10.8%CVE-2023-46848HIGHSquid: denial of service in ftpEPSS 10.2%CVE-2024-26162HIGHMicrosoft ODBC Driver Remote Code Execution VulnerabilityEPSS 2.0%CVE-2019-14842HIGHStructured reply is a feature of the newstyle NBD protocol allowing the server to send a reply in chunks. A bounds check which was supposed EPSS 1.8%CVE-2020-4032LOWInteger casting vulnerability in `update_recv_secondary_order` in FreeRDPEPSS 1.8%CVE-2020-15225HIGHDenial of Service vulnerability in django-filterEPSS 1.8%CVE-2023-24884HIGHMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityEPSS 1.6%CVE-2023-23388HIGHWindows Bluetooth Driver Elevation of Privilege VulnerabilityEPSS 1.6%CVE-2019-10203MEDIUMPowerDNS Authoritative daemon , pdns versions 4.0.x before 4.0.9, 4.1.x before 4.1.11, exiting when encountering a serial between 2^31 and 2EPSS 1.6%CVE-2021-41272HIGHSHL, SHR, and SAR operations trigger native exception at key values in besuEPSS 1.4%CVE-2021-27478HIGHEIPStackGroup OpENer Ethernet/IP Incorrect Conversion between Numeric TypesEPSS 1.1%CVE-2020-28588MEDIUMAn information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux Kernel 5.1 Stable and 5.4.66. More specificalEPSS 1.1%CVE-2021-32996HIGHThe FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to crash. A restart is requEPSS 1.1%CVE-2024-49093HIGHWindows Resilient File System (ReFS) Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2022-40138—An integer conversion error in Hermes bytecode generation, prior to commit 6aa825e480d48127b480b08d13adf70033237097, could have been used toEPSS 0.9%CVE-2023-20006HIGHA vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco FirepEPSS 0.9%CVE-2022-36025CRITICALIncorrect Conversion between Numeric Types in Besu Ethereum ClientEPSS 0.9%CVE-2022-27189HIGHOn F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior EPSS 0.9%CVE-2024-32481MEDIUMvyper's range(start, start + N) reverts for negative numbersEPSS 0.8%