目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CWE-191 整数下溢(超界折返) 类漏洞列表 307

CWE-191 整数下溢(超界折返) 类弱点 307 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-191 整数下溢漏洞发生于程序执行减法操作时，结果低于整数类型允许的最小值，导致数值回绕至最大值附近，产生非预期结果。攻击者常利用此缺陷绕过安全检查或引发逻辑错误，进而可能导致缓冲区溢出等更严重的安全问题。开发者应通过添加边界检查、使用更大范围的整数类型或启用编译器的溢出检测功能，确保算术运算在合法范围内，从而有效防止此类漏洞发生。

MITRE CWE 官方描述
CWE：CWE-191 整数下溢（Integer Underflow）（回绕或回绕现象 Wrap or Wraparound） 产品从一个值中减去另一个值，导致结果小于允许的最小整数值，从而产生一个不等于正确结果的值。 这种情况可能发生在有符号（signed）和无符号（unsigned）情形中。
常见影响 (3)
Availability DoS: Crash, Exit, or Restart, DoS: Resource Consumption (CPU), DoS: Resource Consumption (Memory), DoS: Instability
This weakness will generally lead to undefined behavior and therefore crashes. In the case of overflows involving loop index variables, the likelihood of infinite loops is also high.
Integrity Modify Memory
If the value in question is important to data (as opposed to flow), simple data corruption has occurred. Also, if the wrap around results in other conditions such as buffer overflows, further memory corruption may occur.
Confidentiality, Availability, Access Control Execute Unauthorized Code or Commands, Bypass Protection Mechanism
This weakness can sometimes trigger buffer overflows which can be used to execute arbitrary code. This is usually outside the scope of a program's implicit security policy.
代码示例 (2)
The following example subtracts from a 32 bit signed integer.
#include <stdio.h> #include <stdbool.h> main (void) { int i; i = -2147483648; i = i - 1; return 0; }
Bad · C
This code performs a stack allocation based on a length calculation.
int a = 5, b = 6; size_t len = a - b; char buf[len];    // Just blows up the stack }
Bad · C
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-81977 Adobe Acrobat 数字错误漏洞 — Adobe Acrobat 5.5 Medium 2026-09-08
CVE-2026-66307 Microsoft Skype for Business Server 数字错误漏洞 — Skype for Business Server 2015 CU13 7.5 High 2026-09-08
CVE-2026-78453 Microsoft Windows SCSI Class System File 数字错误漏洞 — Windows 10 Version 1607 6.5 Medium 2026-09-08
CVE-2026-77488 Microsoft SQL Server 数字错误漏洞 — Microsoft SQL Server 2017 (CU 31) 5.5 Medium 2026-09-08
CVE-2026-71352 Microsoft Windows Remote Access Connection Manager 数字错误漏洞 — Windows 10 Version 1607 8.8 High 2026-09-08
CVE-2026-69824 Microsoft XPS 缓冲区错误漏洞 — Windows 10 Version 1607 9.8 Critical 2026-09-08
CVE-2026-69687 Microsoft Windows USB Audio Class 数字错误漏洞 — Windows 10 Version 1607 7.8 High 2026-09-08
CVE-2026-69421 Microsoft Windows Kernel Mode Driver 缓冲区错误漏洞 — Windows 10 Version 1607 7.8 High 2026-09-08
CVE-2026-69269 Microsoft XPS 数字错误漏洞 — Windows 10 Version 1607 7.8 High 2026-09-08
CVE-2026-68827 Microsoft Windows GDI+ 缓冲区错误漏洞 — Windows 10 Version 1607 8.0 High 2026-09-08
CVE-2026-72947 Microsoft Windows File History Service 数字错误漏洞 — Windows 10 Version 1607 6.4 Medium 2026-09-08
CVE-2026-69276 Microsoft UxTheme 缓冲区错误漏洞 — Windows 10 Version 1607 9.8 Critical 2026-09-08
CVE-2026-66767 SAP NetWeaver Application Server for ABAP and ABAP Platform 数字错误漏洞 — SAP NetWeaver Application Server for ABAP and ABAP Platform 7.7 High 2026-09-08
CVE-2026-18355 389 Directory Server 数字错误漏洞 — Red Hat Directory Server 11.7 E4S for RHEL 8 7.5 High 2026-09-07
CVE-2026-85436 themoos essential-moos 数字错误漏洞 — essential-moos 7.5 High 2026-09-03
CVE-2026-9624 Rockwell Automation RSLinx Classic 数字错误漏洞 — RSLinx Classic® 8.7 High 2026-09-01
CVE-2026-9622 Rockwell Automation RSLinx Classic® 数字错误漏洞 — RSLinx Classic® 8.7 High 2026-09-01
CVE-2026-82480 NASA cFS 数字错误漏洞 — cFS 7.4 High 2026-08-30
CVE-2026-54754 Klever 数字错误漏洞 — klever-go 9.6 Critical 2026-08-28
CVE-2026-82250 GitoxideLabs gitoxide 数字错误漏洞 — gitoxide 6.5 Medium 2026-08-28
CVE-2026-19314 WatchGuard Fireware OS 数字错误漏洞 — Fireware OS 8.7 High 2026-08-27
CVE-2026-78011 WatchGuard Fireware OS 数字错误漏洞 — Fireware OS 8.7 High 2026-08-27
CVE-2026-71401 openSUSE wicked 数字错误漏洞 — wicked 5.3 Medium 2026-08-27
CVE-2026-18916 NLnet Labs NSD 数字错误漏洞 — NSD 6.9 Medium 2026-08-26
CVE-2026-76189 Adobe C2PA Tool 数字错误漏洞 — C2PA Tool 6.2 Medium 2026-08-25
CVE-2026-71442 Adobe C2PA Tool 数字错误漏洞 — C2PA Tool 7.5 High 2026-08-25
CVE-2026-71444 Adobe C2PA Tool 数字错误漏洞 — C2PA Tool 6.2 Medium 2026-08-25
CVE-2026-16924 IBM AIX 数字错误漏洞 — AIX 7.5 High 2026-08-20
CVE-2026-58087 FreeBSD 缓冲区错误漏洞 — FreeBSD - - 2026-08-19
CVE-2026-62289 struktur AG libheif 数字错误漏洞 — libheif 4.3 Medium 2026-08-18

CWE-191（整数下溢(超界折返)） 是常见的弱点类别，本平台收录该类弱点关联的 307 条 CVE 漏洞。