CWE-466—Return of Pointer Value Outside of Expected Range

名称

Return of Pointer Value Outside of Expected Range

描述

A function can return a pointer to memory that is outside of the buffer that the pointer is expected to reference.

常见后果

范围：

Confidentiality, Integrity

影响：

Read Memory, Modify Memory

相关 CWE

• CWE-20Improper Input ValidationHigh
• CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferHigh