Falhas do tipo CWE-681

61 resultados

Conversão incorreta entre tipos numéricos

Ocorre quando o código converte um número de um tipo para outro sem validar se o valor cabe no novo tipo ou se a conversão preserva a semântica esperada. Um inteiro grande pode virar negativo, um float pode perder precisão, ou um valor assinado vira sem-sinal — causando lógica quebrada, buffer overflow ou bypass de validações.

Exemplo

Um validador verifica se um tamanho de buffer é menor que 1000 (int assinado). Se receber -2147483648 (int mínimo) e converter para size_t sem-sinal, vira um número gigante e o malloc aloca muito pouco, causando overflow.

Como mitigar

Sempre validar o intervalo antes de converter; usar tipos consistentes em comparações críticas; ferramentas estáticas (clang-analyzer, SonarQube) detectam conversões suspeitas; preferir bibliotecas seguras que encapsulam conversões numéricas.

CVE-2023-21736HIGHMicrosoft Office Visio Remote Code Execution VulnerabilityEPSS 0.7%CVE-2024-1552HIGHIncorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.*Note:* This issue only affects EPSS 0.7%CVE-2022-40225MEDIUMA vulnerability has been identified in SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (EPSS 0.6%CVE-2021-3444HIGHLinux kernel bpf verifier incorrect mod32 truncationEPSS 0.6%CVE-2023-23401HIGHWindows Media Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-25989HIGHImageMagick has integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoderEPSS 0.6%CVE-2025-24059HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-24174HIGHNVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request to the sEPSS 0.5%CVE-2025-53733HIGHMicrosoft Word Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-4602HIGHVersions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to handling negative exponeEPSS 0.5%CVE-2023-29346HIGHNTFS Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2024-7747MEDIUMWallet for WooCommerce <= 1.5.6 - Authenticated (Subscriber+) Incorrect Conversion between Numeric TypesEPSS 0.5%CVE-2026-26178HIGHWindows Advanced Rasterization Platform Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2025-58063HIGHCoreDNS: DNS Cache Pinning via etcd Lease ID ConfusionEPSS 0.4%CVE-2026-50402HIGHNTFS Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-55123HIGHMicrosoft PowerPoint Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-34945LOWWasmtime leaks host data with 64-bit tables and WinchEPSS 0.3%CVE-2026-21688HIGHiccDEV has Type Confusion in SIccCalcOp::ArgsPushed() at IccProfLib/IccMpeCalc.cppEPSS 0.3%CVE-2026-21693HIGHiccDEV has Type Confusion in CIccSegmentedCurveXml::ToXml() at IccXML/IccLibXML/IccMpeXml.cppEPSS 0.3%CVE-2022-0322—A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel with a EPSS 0.3%