CWE-191 整数下溢(超界折返) 类弱点 307 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-191 整数下溢漏洞发生于程序执行减法操作时，结果低于整数类型允许的最小值，导致数值回绕至最大值附近，产生非预期结果。攻击者常利用此缺陷绕过安全检查或引发逻辑错误，进而可能导致缓冲区溢出等更严重的安全问题。开发者应通过添加边界检查、使用更大范围的整数类型或启用编译器的溢出检测功能，确保算术运算在合法范围内，从而有效防止此类漏洞发生。
#include <stdio.h> #include <stdbool.h> main (void) { int i; i = -2147483648; i = i - 1; return 0; }int a = 5, b = 6; size_t len = a - b; char buf[len]; // Just blows up the stack }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-21122 | Adobe Photoshop 数字错误漏洞 — Photoshop Desktop | 7.8 | High | 2025-01-14 |
| CVE-2025-21276 | Microsoft MapUrlToZone 安全漏洞 — Windows 10 Version 1507 | 7.5 | High | 2025-01-14 |
| CVE-2024-57823 | Raptor RDF Syntax Library 安全漏洞 — Raptor RDF Syntax Library | 9.3 | Critical | 2025-01-10 |
| CVE-2024-55627 | Suricata 安全漏洞 — suricata | 5.9 | Medium | 2025-01-06 |
| CVE-2024-56375 | FORT Validator 安全漏洞 — fort-validator | 7.5 | - | 2024-12-22 |
| CVE-2024-11950 | XnSoft XnView Classic 数字错误漏洞 — XnView Classic | 7.8 | - | 2024-12-11 |
| CVE-2024-47546 | GStreamer 数字错误漏洞 — gstreamer | 6.1 | - | 2024-12-11 |
| CVE-2024-47545 | GStreamer 数字错误漏洞 — gstreamer | 7.1 | - | 2024-12-11 |
| CVE-2024-53955 | Adobe Bridge 数字错误漏洞 — Bridge | 7.8 | High | 2024-12-10 |
| CVE-2024-52985 | Adobe Animate 数字错误漏洞 — Animate | 7.8 | High | 2024-12-10 |
| CVE-2024-52987 | Adobe Animate 数字错误漏洞 — Animate | 7.8 | High | 2024-12-10 |
| CVE-2024-52989 | Adobe Animate 数字错误漏洞 — Animate | 7.8 | High | 2024-12-10 |
| CVE-2024-53954 | Adobe Animate 数字错误漏洞 — Animate | 7.8 | High | 2024-12-10 |
| CVE-2024-52984 | Adobe Animate 数字错误漏洞 — Animate | 7.8 | High | 2024-12-10 |
| CVE-2024-52986 | Adobe Animate 数字错误漏洞 — Animate | 7.8 | High | 2024-12-10 |
| CVE-2024-49077 | Microsoft Windows Mobile Broadband Driver 数字错误漏洞 — Windows 10 Version 1809 | 6.8 | Medium | 2024-12-10 |
| CVE-2024-49103 | Microsoft Windows Wireless Wide Area Network Service 数字错误漏洞 — Windows 10 Version 1809 | 4.3 | Medium | 2024-12-10 |
| CVE-2024-54095 | Siemens Solid Edge 数字错误漏洞 — Solid Edge SE2024 | 7.8 | High | 2024-12-10 |
| CVE-2024-52558 | Planet WGS-804HPT 安全漏洞 — Planet WGS-804HPT | 5.3 | Medium | 2024-12-06 |
| CVE-2024-11477 | 7-Zip 数字错误漏洞 — 7-Zip | 9.8 | - | 2024-11-22 |
| CVE-2024-49514 | Adobe Photoshop 数字错误漏洞 — Photoshop Desktop | 7.8 | High | 2024-11-12 |
| CVE-2024-20474 | Cisco Secure Client 安全漏洞 — Cisco Secure Client | 4.3 | Medium | 2024-10-23 |
| CVE-2024-47425 | Adobe Framemaker 数字错误漏洞 — Adobe Framemaker | 7.8 | High | 2024-10-09 |
| CVE-2024-41857 | Adobe Illustrator 数字错误漏洞 — Illustrator | 7.8 | High | 2024-09-13 |
| CVE-2024-38063 | Microsoft Windows TCP/IP component 数字错误漏洞 — Windows 10 Version 1809 | 9.8 | Critical | 2024-08-13 |
| CVE-2024-38517 | Tencent RapidJSON 安全漏洞 — RapidJSON | 6.8 | High | 2024-07-09 |
| CVE-2024-38074 | Microsoft Remote Desktop Client 安全漏洞 — Windows Server 2019 | 9.8 | Critical | 2024-07-09 |
| CVE-2024-38050 | Microsoft Windows Workstation 安全漏洞 — Windows 10 Version 1809 | 7.8 | High | 2024-07-09 |
| CVE-2024-37975 | Microsoft Windows Secure Boot 安全漏洞 — Windows 10 Version 1809 | 8.0 | High | 2024-07-09 |
| CVE-2024-37986 | Microsoft Windows Secure Boot 安全漏洞 — Windows 10 Version 1809 | 8.0 | High | 2024-07-09 |
CWE-191（整数下溢(超界折返)） 是常见的弱点类别，本平台收录该类弱点关联的 307 条 CVE 漏洞。