CWE-680—Integer Overflow to Buffer Overflow

Weakness Name

Integer Overflow to Buffer Overflow

Description

The product performs a calculation to determine how much memory to allocate, but an integer overflow can occur that causes less memory to be allocated than expected, leading to a buffer overflow.

Common Consequences

Scope:

Integrity, Availability, Confidentiality

Impact:

Modify Memory, DoS: Crash, Exit, or Restart, Execute Unauthorized Code or Commands

Related Weaknesses

• CWE-190Integer Overflow or WraparoundMedium