CWE-789—Memory Allocation with Excessive Size Value

名称

Memory Allocation with Excessive Size Value

描述

The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.

常见后果

范围：

Availability

影响：

DoS: Resource Consumption (Memory)

注释：

Not controlling memory allocation can result in a request for too much system memory, possibly leading to a crash of the application due to out-of-memory conditions, or the consumption of a large amount of memory on the system.

相关 CWE

• CWE-476NULL Pointer DereferenceMedium
• CWE-770Allocation of Resources Without Limits or ThrottlingHigh