CWE-191 整数下溢(超界折返) 类弱点 307 条 CVE 漏洞汇总,含 AI 中文分析。
CWE-191 整数下溢漏洞发生于程序执行减法操作时,结果低于整数类型允许的最小值,导致数值回绕至最大值附近,产生非预期结果。攻击者常利用此缺陷绕过安全检查或引发逻辑错误,进而可能导致缓冲区溢出等更严重的安全问题。开发者应通过添加边界检查、使用更大范围的整数类型或启用编译器的溢出检测功能,确保算术运算在合法范围内,从而有效防止此类漏洞发生。
#include <stdio.h> #include <stdbool.h> main (void) { int i; i = -2147483648; i = i - 1; return 0; }
int a = 5, b = 6; size_t len = a - b; char buf[len]; // Just blows up the stack }
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-45698 | Netatalk 数字错误漏洞 — netatalk | 7.5 | High | 2026-08-17 |
| CVE-2026-45699 | Netatalk 数字错误漏洞 — netatalk | 7.5 | High | 2026-08-14 |
| CVE-2026-16241 | PostgreSQL 数字错误漏洞 — PostgreSQL | 3.8 | Low | 2026-08-13 |
| CVE-2026-18728 | Open-iSCSI 数字错误漏洞 — Red Hat Enterprise Linux 10 | 6.5 | Medium | 2026-08-13 |
| CVE-2026-18727 | Open-iSCSI 数字错误漏洞 — Red Hat Enterprise Linux 10 | 6.5 | Medium | 2026-08-12 |
| CVE-2026-73433 | GStreamer gst-plugins-good 数字错误漏洞 — gst-plugins-good | 6.6 | Medium | 2026-08-12 |
| CVE-2026-18687 | MongoDB Server 数字错误漏洞 — MongoDB Server | 7.1 | High | 2026-08-11 |
| CVE-2026-64909 | Microsoft Office 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise | 7.8 | High | 2026-08-11 |
| CVE-2026-62814 | Microsoft Windows DHCP Server 缓冲区错误漏洞 — Windows Server 2012 | 6.5 | Medium | 2026-08-11 |
| CVE-2026-62741 | Microsoft HTTP.sys 缓冲区错误漏洞 — Windows 10 Version 1607 | 7.8 | High | 2026-08-11 |
| CVE-2026-62720 | Microsoft Windows DHCP Server 缓冲区错误漏洞 — Windows Server 2012 | 6.5 | Medium | 2026-08-11 |
| CVE-2026-62714 | Microsoft Windows DHCP Server 缓冲区错误漏洞 — Windows Server 2012 | 6.5 | Medium | 2026-08-11 |
| CVE-2026-62742 | Microsoft Windows DHCP Server 缓冲区错误漏洞 — Windows Server 2012 | 6.5 | Medium | 2026-08-11 |
| CVE-2026-62745 | Microsoft Windows DHCP Server 缓冲区错误漏洞 — Windows Server 2012 | 6.5 | Medium | 2026-08-11 |
| CVE-2026-62716 | Microsoft Windows 缓冲区错误漏洞 — Windows Server 2012 | 6.5 | Medium | 2026-08-11 |
| CVE-2026-62718 | Microsoft Windows 缓冲区错误漏洞 — Windows Server 2012 | 6.5 | Medium | 2026-08-11 |
| CVE-2026-62715 | Microsoft Windows DHCP Server 缓冲区错误漏洞 — Windows Server 2012 R2 | 6.5 | Medium | 2026-08-11 |
| CVE-2026-62696 | Microsoft Windows Program Compatibility Assistant Service 数字错误漏洞 — Windows 10 Version 1607 | 7.8 | High | 2026-08-11 |
| CVE-2026-48435 | Adobe Content Credentials Rust SDK 数字错误漏洞 — Content Credentials Rust SDK | 6.2 | Medium | 2026-08-11 |
| CVE-2026-71389 | Adobe Content Credentials Rust SDK 数字错误漏洞 — Content Credentials Rust SDK | 6.2 | Medium | 2026-08-11 |
| CVE-2026-59090 | GIMP 数字错误漏洞 | 8.4 | High | 2026-08-10 |
| CVE-2026-70633 | TimescaleDB 缓冲区错误漏洞 — timescaledb | 6.5 | Medium | 2026-08-06 |
| CVE-2026-43628 | ggml llama.cpp 缓冲区错误漏洞 — llama.cpp | 7.8 | High | 2026-08-06 |
| CVE-2026-18839 | rpm-software-management popt 数字错误漏洞 — popt | 2.2 | Low | 2026-08-05 |
| CVE-2026-71202 | kosinix raster 数字错误漏洞 — raster | 7.5 | High | 2026-08-05 |
| CVE-2026-24077 | Qualcomm Chipsets 数字错误漏洞 — Snapdragon | 6.5 | Medium | 2026-08-04 |
| CVE-2026-67298 | FreeRDP 数字错误漏洞 — FreeRDP | 7.5 | High | 2026-08-01 |
| CVE-2026-63362 | o6 Automation open62541 数字错误漏洞 — open62541 | 5.9 | Medium | 2026-07-30 |
| CVE-2026-13308 | Autel MaxiCharger AC Elite Home 数字错误漏洞 — MaxiCharger AC Elite Home | - | - | 2026-07-29 |
| CVE-2026-54345 | GoPacket 数字错误漏洞 — gopacket | 6.9 | Medium | 2026-07-28 |
CWE-191(整数下溢(超界折返)) 是常见的弱点类别,本平台收录该类弱点关联的 307 条 CVE 漏洞。