CWE-191 整数下溢(超界折返) 类弱点 307 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-191 整数下溢漏洞发生于程序执行减法操作时，结果低于整数类型允许的最小值，导致数值回绕至最大值附近，产生非预期结果。攻击者常利用此缺陷绕过安全检查或引发逻辑错误，进而可能导致缓冲区溢出等更严重的安全问题。开发者应通过添加边界检查、使用更大范围的整数类型或启用编译器的溢出检测功能，确保算术运算在合法范围内，从而有效防止此类漏洞发生。
#include <stdio.h> #include <stdbool.h> main (void) { int i; i = -2147483648; i = i - 1; return 0; }int a = 5, b = 6; size_t len = a - b; char buf[len]; // Just blows up the stack }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-52471 | ESP-IDF 数字错误漏洞 — esp-idf | 9.8AI | Critical AI | 2025-06-24 |
| CVE-2024-54028 | Catdoc 安全漏洞 — catdoc | 8.4 | High | 2025-06-02 |
| CVE-2025-49112 | Valkey 数字错误漏洞 — Valkey | 3.1 | Low | 2025-06-02 |
| CVE-2025-4948 | libsoup 数字错误漏洞 | 7.5 | High | 2025-05-19 |
| CVE-2025-30668 | Zoom Workplace 安全漏洞 — Zoom Workplace Apps | 6.5 | Medium | 2025-05-14 |
| CVE-2025-43546 | Adobe Bridge 数字错误漏洞 — Bridge | 7.8 | High | 2025-05-13 |
| CVE-2025-43555 | Adobe Animate 数字错误漏洞 — Animate | 7.8 | High | 2025-05-13 |
| CVE-2025-30324 | Adobe Photoshop 数字错误漏洞 — Photoshop Desktop | 7.8 | High | 2025-05-13 |
| CVE-2025-29974 | Microsoft Windows Kernel 数字错误漏洞 — Windows 10 Version 1507 | 5.7 | Medium | 2025-05-13 |
| CVE-2025-47256 | Libxmp 安全漏洞 — Libxmp | 5.6 | Medium | 2025-05-06 |
| CVE-2025-26269 | Dragonfly 安全漏洞 — Dragonfly | 3.3 | Low | 2025-04-17 |
| CVE-2025-30296 | Adobe Framemaker 数字错误漏洞 — Adobe Framemaker | 7.8 | High | 2025-04-08 |
| CVE-2025-2259 | Eclipse ThreadX NetX Duo 安全漏洞 — ThreadX | 7.5AI | High AI | 2025-04-06 |
| CVE-2025-2258 | Eclipse ThreadX NetX Duo 安全漏洞 — ThreadX | 7.5AI | High AI | 2025-04-06 |
| CVE-2024-50597 | STMicroelectronics X-CUBE-AZRTOS-WL 数字错误漏洞 — X-CUBE-AZRT-H7RS | 4.3 | Medium | 2025-04-02 |
| CVE-2024-50594 | STMicroelectronics X-CUBE-AZRTOS-WL 数字错误漏洞 — X-CUBE-AZRT-H7RS | 4.3 | Medium | 2025-04-02 |
| CVE-2024-50595 | STMicroelectronics X-CUBE-AZRTOS-WL 数字错误漏洞 — X-CUBE-AZRT-H7RS | 4.3 | Medium | 2025-04-02 |
| CVE-2024-50596 | STMicroelectronics X-CUBE-AZRTOS-WL 数字错误漏洞 — X-CUBE-AZRT-H7RS | 4.3 | Medium | 2025-04-02 |
| CVE-2025-30356 | CryptoLib 数字错误漏洞 — CryptoLib | 9.8AI | Critical AI | 2025-04-01 |
| CVE-2025-2581 | xmedcon 数字错误漏洞 — xmedcon | 4.3 | Medium | 2025-03-21 |
| CVE-2025-29909 | CryptoLib 安全漏洞 — CryptoLib | 9.8 | - | 2025-03-17 |
| CVE-2024-10838 | Eclipse Cyclone DDS 安全漏洞 — Eclipse Cyclone DDS | 9.1 | - | 2025-03-12 |
| CVE-2025-0727 | Eclipse ThreadX NetX Duo 安全漏洞 — ThreadX | 7.5 | - | 2025-02-21 |
| CVE-2025-0728 | Eclipse ThreadX NetX Duo 安全漏洞 — ThreadX | 7.5 | - | 2025-02-21 |
| CVE-2025-21160 | Adobe Illustrator 数字错误漏洞 — Illustrator | 7.8 | High | 2025-02-11 |
| CVE-2025-21156 | Adobe InCopy 数字错误漏洞 — InCopy | 7.8 | High | 2025-02-11 |
| CVE-2025-21158 | Adobe InDesign 数字错误漏洞 — InDesign Desktop | 7.8 | High | 2025-02-11 |
| CVE-2025-21135 | Adobe Animate 数字错误漏洞 — Animate | 7.8 | High | 2025-01-14 |
| CVE-2025-21134 | Adobe Illustrator 数字错误漏洞 — Illustrator on iPad | 7.8 | High | 2025-01-14 |
| CVE-2025-21133 | Adobe Illustrator 数字错误漏洞 — Illustrator on iPad | 7.8 | High | 2025-01-14 |
CWE-191（整数下溢(超界折返)） 是常见的弱点类别，本平台收录该类弱点关联的 307 条 CVE 漏洞。