CWE-191 整数下溢(超界折返) 类弱点 307 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-191 整数下溢漏洞发生于程序执行减法操作时，结果低于整数类型允许的最小值，导致数值回绕至最大值附近，产生非预期结果。攻击者常利用此缺陷绕过安全检查或引发逻辑错误，进而可能导致缓冲区溢出等更严重的安全问题。开发者应通过添加边界检查、使用更大范围的整数类型或启用编译器的溢出检测功能，确保算术运算在合法范围内，从而有效防止此类漏洞发生。
#include <stdio.h> #include <stdbool.h> main (void) { int i; i = -2147483648; i = i - 1; return 0; }int a = 5, b = 6; size_t len = a - b; char buf[len]; // Just blows up the stack }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-29078 | Lexbor 缓冲区错误漏洞 — lexbor | 8.8 | - | 2026-03-13 |
| CVE-2026-23748 | Golioth Firmware SDK 安全漏洞 — Firmware SDK | 3.7 | Low | 2026-02-26 |
| CVE-2026-27710 | NanaZip 安全漏洞 — NanaZip | 7.5AI | High AI | 2026-02-25 |
| CVE-2026-3172 | pgvector 安全漏洞 — pgvector | 8.1 | High | 2026-02-25 |
| CVE-2025-14055 | Silicon Labs Simplicity SDK 安全漏洞 — Simplicity SDK, Gecko SDK | 7.5AI | High AI | 2026-02-20 |
| CVE-2025-14547 | Silicon Labs Gecko SDK和Silicon Labs Simplicity SDK 安全漏洞 — Simplicity SDK | 7.5AI | High AI | 2026-02-20 |
| CVE-2025-48021 | Yokogawa Electric Corporation Vnet/IP Interface 安全漏洞 — Vnet/IP Interface Package | 7.5AI | High AI | 2026-02-13 |
| CVE-2025-1924 | Yokogawa Electric Corporation Vnet/IP Interface 安全漏洞 — Vnet/IP Interface Package | 9.8AI | Critical AI | 2026-02-13 |
| CVE-2026-25532 | Espressif ESP-IDF 数字错误漏洞 — esp-idf | 6.3 | Medium | 2026-02-04 |
| CVE-2025-62291 | strongSwan 数字错误漏洞 — strongSwan | 8.1 | High | 2026-01-16 |
| CVE-2026-20957 | Microsoft Excel 数字错误漏洞 — Microsoft 365 Apps for Enterprise | 7.8 | High | 2026-01-13 |
| CVE-2025-62567 | Microsoft Hyper-V 数字错误漏洞 — Windows 10 Version 1607 | 5.3 | Medium | 2025-12-09 |
| CVE-2025-59368 | ASUS Router 安全漏洞 — Router | 6.5AI | Medium AI | 2025-11-25 |
| CVE-2025-11931 | wolfSSL 安全漏洞 — wolfSSL | 9.8 | - | 2025-11-21 |
| CVE-2025-61835 | Adobe Substance3D Stager 数字错误漏洞 — Substance3D - Stager | 7.8 | High | 2025-11-11 |
| CVE-2025-61826 | Adobe Illustrator on iPad 数字错误漏洞 — Illustrator on iPad | 7.8 | High | 2025-11-11 |
| CVE-2025-61836 | Adobe Illustrator on iPad 数字错误漏洞 — Illustrator on iPad | 7.8 | High | 2025-11-11 |
| CVE-2025-55096 | Eclipse ThreadX USBX 数字错误漏洞 — NetX Duo | 8.2AI | High AI | 2025-10-17 |
| CVE-2025-62495 | QuickJS 安全漏洞 — QuickJS | 9.8AI | Critical AI | 2025-10-16 |
| CVE-2025-23335 | NVIDIA Triton Inference Server 数字错误漏洞 — Triton Inference Server | 4.4 | Medium | 2025-08-06 |
| CVE-2025-3947 | Honeywell Experion PKS 数字错误漏洞 — C300 PCNT02 | 8.2 | High | 2025-07-10 |
| CVE-2025-2523 | Honeywell Experion PKS 数字错误漏洞 — C300 PCNT02 | 9.4 | Critical | 2025-07-10 |
| CVE-2025-47097 | Adobe InCopy 数字错误漏洞 — InCopy | 7.8 | High | 2025-07-08 |
| CVE-2025-47128 | Adobe Framemaker 数字错误漏洞 — Adobe Framemaker | 7.8 | High | 2025-07-08 |
| CVE-2025-47130 | Adobe Framemaker 数字错误漏洞 — Adobe Framemaker | 7.8 | High | 2025-07-08 |
| CVE-2025-49532 | Adobe Illustrator 数字错误漏洞 — Illustrator | 7.8 | High | 2025-07-08 |
| CVE-2025-47136 | Adobe InDesign Desktop 数字错误漏洞 — InDesign Desktop | 7.8 | High | 2025-07-08 |
| CVE-2025-47996 | Microsoft Windows 数字错误漏洞 — Windows 10 Version 1507 | 7.8 | High | 2025-07-08 |
| CVE-2023-28902 | Volkswagen MIB3 Infotainment 安全漏洞 — Volkswagen MIB3 infotainment system MIB3 OI MQB | 3.3 | Low | 2025-06-28 |
| CVE-2025-1991 | IBM Informix Dynamic Server 数字错误漏洞 — Informix Dynamic Server | 7.5 | High | 2025-06-28 |
CWE-191（整数下溢(超界折返)） 是常见的弱点类别，本平台收录该类弱点关联的 307 条 CVE 漏洞。