Memory Buffer Errors
A category in the Common Weakness Enumeration published by The MITRE Corporation.
Categories in the Common Weakness Enumeration (CWE) group entries based on some common characteristic or attribute.
Weaknesses in this category are related to the handling of memory buffers within a software system.
The product reads or writes to a buffer using an index or pointer that references a memory location after the end of the buffer.
The product reads or writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.
The product uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds ...
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buf...
The product writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.
The product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.
The product reads data past the end, or before the beginning, of the intended buffer.
The product writes data past the end, or before the beginning, of the intended buffer.
Any condition where the attacker has the ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow.
This view organizes weaknesses around concepts that are frequently used or encountered in software development. This includes all aspects of the software development l...