Memory Buffer Errors
A category in the Common Weakness Enumeration published by The MITRE Corporation.
Categories in the Common Weakness Enumeration (CWE) group entries based on some common characteristic or attribute.
Weaknesses in this category are related to the handling of memory buffers within a software system.
The software reads or writes to a buffer using an index or pointer that references a memory location after the end of the buffer.
The software reads or writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.
The software uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds...
The program copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buf...
The software writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.
The software does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.
The software reads data past the end, or before the beginning, of the intended buffer.
The software writes data past the end, or before the beginning, of the intended buffer.
Any condition where the attacker has the ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow.
This view organizes weaknesses around concepts that are frequently used or encountered in software development. This includes all aspects of the software development l...