What MITRE CWE-190 - Integer Overflow or Wraparound requires
CWE-190 (Integer Overflow or Wraparound) is a CWE Top 25 weakness that frequently sits underneath buffer overflow, heap corruption, and protection-bypass vulnerabilities. CWE-190 is defined as: the product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. When an integer value is incremented beyond its maximum representable range, it becomes very small or negative rather than growing as expected. Common Consequences include availability impact (integer overflow can cause crashes, resource exhaustion, or instability; when calculations determine resource allocation, incorrect results may lead to excessive or insufficient resource requests); integrity impact (data corruption occurs when overflow results affect important values; additional memory corruption may occur if overflow triggers buffer overflow conditions); confidentiality and access control impact (overflows can trigger buffer overflows enabling arbitrary code execution; integer overflows in security-critical decisions such as quota or limit calculations can bypass protection mechanisms); and logic and availability impact (when overflow occurs in loop indices, loops may terminate incorrectly, creating infinite loops or excessive iterations that consume resources and crash systems). Potential Mitigations include input validation (validate numeric inputs ensuring they remain within expected ranges, checking both minimum and maximum boundaries; prefer unsigned integers when feasible); language selection (use languages with automatic bounds checking or those preventing this weakness); libraries and frameworks (employ vetted libraries like SafeInt in C++ or IntegerLib offering safe integer handling without unexpected consequences); and compiler hardening (address compiler warnings about signed/unsigned mismatches and uninitialized variables that could enable exploitation). Modern mitigations include UndefinedBehaviorSanitizer (UBSan) with -fsanitize=integer in test builds, checked arithmetic primitives (Rust checked_add, Go math/bits, C++ __builtin_add_overflow), and language-level overflow trapping (Swift, Ada).
Pillar: Cybersecurity · Authority: MITRE Corporation / Common Weakness Enumeration · Version: 1.0.0 · Last updated:
Primary source: https://cwe.mitre.org/data/definitions/190.html
SHA-256 integrity: 00241b0dec64ecfee2e8886df000ebb92fa287b457ea5f33d90b2c943d83de85
Primary Citations — 10 traced to source
- CWE-190: Integer Overflow or Wraparound - MITRE Common Weakness Enumeration at https://cwe.mitre.org/data/definitions/190.html
- CWE-190 Definition - the product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value
+ 8 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/mitre-cwe-190-integer-overflow.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/mitre-cwe-190-integer-overflow.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/mitre-cwe-190-integer-overflow
- Back to registry: Browse all 10,085 compliance nodes