CWE-806—Buffer Access Using Size of Source Buffer
PUBLISHEDweakness record
released 2010-02-16 · last modified 2025-12-11
Metadata
- CWE ID：
- CWE-806
- 摘要：
- Variant
- 结构：
- Simple
- 状态：
- Incomplete
- 发布日期：
- 2010-02-16
- 更新日期：
- 2025-12-11
名称
Buffer Access Using Size of Source Buffer
描述
The product uses the size of a source buffer when reading from or writing to a destination buffer, which may cause it to access memory that is outside of the bounds of the buffer.
When the size of the destination is smaller than the size of the source, a buffer overflow could occur.
常见后果
- 范围：
- Availability
- 影响：
- Modify Memory, DoS: Crash, Exit, or Restart, DoS: Resource Consumption (CPU)
- 注释：
- Buffer overflows generally lead to crashes. Other attacks leading to lack of availability are possible, including putting the program into an infinite loop.
- 范围：
- Integrity, Confidentiality, Availability
- 影响：
- Read Memory, Modify Memory, Execute Unauthorized Code or Commands
- 注释：
- Buffer overflows often can be used to execute arbitrary code, which is usually outside the scope of a program's implicit security policy.
- 范围：
- Access Control
- 影响：
- Bypass Protection Mechanism
- 注释：
- When the consequence is arbitrary code execution, this can often be used to subvert any other security service.