CWE-469—Use of Pointer Subtraction to Determine Size

名称

Use of Pointer Subtraction to Determine Size

描述

The product subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.

常见后果

范围：

Access Control, Integrity, Confidentiality, Availability

影响：

Modify Memory, Read Memory, Execute Unauthorized Code or Commands, Gain Privileges or Assume Identity

注释：

There is the potential for arbitrary code execution with privileges of the vulnerable program.

相关 CWE

• CWE-682Incorrect CalculationHigh