CWE
CWE/SANS Top 25 Most Dangerous Software Errors Common Weakness Scoring System
Common Weakness Risk Analysis Framework
Home > CWE List > CWE- Individual Dictionary Definition (2.1)  

CWE-465: Pointer Issues

 
Pointer Issues
Category ID: 465 (Category)Status: Draft
+ Description

Description Summary

Weaknesses in this category are related to improper handling of pointers.
+ Relationships
NatureTypeIDNameView(s) this relationship pertains toView(s)
ChildOfCategoryCategory18Source Code
Development Concepts (primary)699
ParentOfWeakness BaseWeakness Base466Return of Pointer Value Outside of Expected Range
Development Concepts (primary)699
ParentOfWeakness VariantWeakness Variant467Use of sizeof() on a Pointer Type
Development Concepts (primary)699
ParentOfWeakness BaseWeakness Base468Incorrect Pointer Scaling
Development Concepts (primary)699
ParentOfWeakness BaseWeakness Base469Use of Pointer Subtraction to Determine Size
Development Concepts (primary)699
ParentOfWeakness BaseWeakness Base476NULL Pointer Dereference
Development Concepts699
ParentOfWeakness BaseWeakness Base587Assignment of a Fixed Address to a Pointer
Development Concepts (primary)699
ParentOfWeakness VariantWeakness Variant588Attempt to Access Child of a Non-structure Pointer
Development Concepts (primary)699
ParentOfWeakness VariantWeakness Variant761Free of Pointer not at Start of Buffer
Development Concepts (primary)699
ParentOfWeakness BaseWeakness Base763Release of Invalid Pointer or Reference
Development Concepts699
ParentOfWeakness VariantWeakness Variant781Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code
Development Concepts699
ParentOfWeakness BaseWeakness Base822Untrusted Pointer Dereference
Development Concepts699
ParentOfWeakness BaseWeakness Base823Use of Out-of-range Pointer Offset
Development Concepts699
ParentOfWeakness BaseWeakness Base824Access of Uninitialized Pointer
Development Concepts699
ParentOfWeakness BaseWeakness Base825Expired Pointer Dereference
Development Concepts699
+ Content History
Modifications
Modification DateModifierOrganizationSource
2008-09-08CWE Content TeamMITREInternal
updated Relationships
2010-09-27CWE Content TeamMITREInternal
updated Relationships
Back to top
Page Last Updated: September 12, 2011
 

CWE is a Software Assurance strategic initiative co-sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security.

This Web site is sponsored and managed by The MITRE Corporation to enable stakeholder collaboration. Copyright © 2006-2012, The MITRE Corporation. CWE, CWSS, CWRAF, and the CWE logo are trademarks of The MITRE Corporation.

Contact cwe@mitre.org for more information.
Privacy policy
Terms of use
Contact us