CWE-680

Integer Overflow to Buffer Overflow
AI Translation Available

The product performs a calculation to determine how much memory to allocate, but an integer overflow can occur that causes less memory to be allocated than expected, leading to a buffer overflow.

Status
draft
Abstraction
compound
C C++ Memory-Unsafe

Common Consequences

integrity availability confidentiality
Impacts
modify memory dos: crash, exit, or restart execute unauthorized code or commands

Detection Methods

automated static analysis automated dynamic analysis

Potential Mitigations

Functional Areas

memory management