CWE-680—Integer Overflow to Buffer Overflow

名称

Integer Overflow to Buffer Overflow

描述

The product performs a calculation to determine how much memory to allocate, but an integer overflow can occur that causes less memory to be allocated than expected, leading to a buffer overflow.

常见后果

范围：

Integrity, Availability, Confidentiality

影响：

Modify Memory, DoS: Crash, Exit, or Restart, Execute Unauthorized Code or Commands

相关 CWE

• CWE-190Integer Overflow or WraparoundMedium