CWE
Home > CWE List > VIEW LIST: CWE-658: Weaknesses found in the C Language (Draft 9)   View the CWE List

VIEW LIST: CWE-658: Weaknesses found in the C Language (Draft 9)

Weaknesses found in the C Language
View ID
Status: Draft

658 (View)

ObjectiveThis view (slice) covers issues that are found in C that are not common to all languages.
View Data

Filter Used: .//Applicable_Platforms/Platform='C'

CWEs in this viewTotal CWEs
Total63out of695
Views0out of14
Categories2out of64
Weaknesses57out of605
Compound_Elements4out of12
Back to top
Weakness BaseWeakness Base Addition of Data Structure Sentinel - (464)
Weakness VariantWeakness Variant Assigning instead of Comparing - (481)
Weakness BaseWeakness Base Assignment of a Fixed Address to a Pointer - (587)
Weakness BaseWeakness Base Boundary Beginning Violation ('Buffer Underwrite') - (124)
Weakness VariantWeakness Variant Buffer Over-read - (126)
Weakness VariantWeakness Variant Buffer Under-read - (127)
Weakness VariantWeakness Variant Comparing instead of Assigning - (482)
Weakness BaseWeakness Base Declaration of Catch for Generic Exception - (396)
Weakness BaseWeakness Base Declaration of Throws for Generic Exception - (397)
Weakness BaseWeakness Base Deletion of Data Structure Sentinel - (463)
Weakness VariantWeakness Variant Double Free - (415)
Weakness BaseWeakness Base Duplicate Key in Associative List (Alist) - (462)
Weakness VariantWeakness Variant Failure to Change Working Directory in chroot Jail - (243)
Weakness VariantWeakness Variant Failure to Clear Heap Memory Before Release - (244)
Weakness VariantWeakness Variant Failure to Release Memory Before Removing Last Reference (aka 'Memory Leak') - (401)
Weakness VariantWeakness Variant Failure to Use Default Case in Switch - (478)
Weakness VariantWeakness Variant Function Call With Incorrect Number of Arguments - (685)
Weakness VariantWeakness Variant Function Call With Incorrect Variable or Reference as Argument - (688)
Weakness VariantWeakness Variant Heap-based Buffer Overflow - (122)
Weakness VariantWeakness Variant Improper Cleanup on Thrown Exception - (460)
Weakness BaseWeakness Base Improper Null Termination - (170)
Compound Element: Chain Incomplete Blacklist to Cross-Site Scripting - (692)
Weakness ClassWeakness Class Incorrect Calculation of Buffer Size - (131)
Weakness BaseWeakness Base Incorrect Calculation of Multi-Byte String Length - (135)
Weakness BaseWeakness Base Incorrect Pointer Scaling - (468)
Weakness BaseWeakness Base Incorrect Sign Extension - (194)
Category Integer Coercion Error - (192)
Weakness BaseWeakness Base Integer Underflow (Wrap or Wraparound) - (191)
Weakness BaseWeakness Base Miscalculated Null Termination - (132)
Weakness BaseWeakness Base Mutable Objects Passed by Reference - (374)
Weakness BaseWeakness Base NULL Pointer Dereference - (476)
Weakness BaseWeakness Base Numeric Truncation Error - (197)
Weakness VariantWeakness Variant Often Misused: Path Manipulation - (249)
Category Often Misused: String Management - (251)
Weakness BaseWeakness Base Omitted Break Statement - (484)
Weakness BaseWeakness Base Out-of-bounds Read - (125)
Weakness BaseWeakness Base Passing Mutable Objects to an Untrusted Method - (375)
Compound Element: Composite Permission Race Condition During Resource Copy - (689)
Weakness VariantWeakness Variant Private Array-Typed Field Returned From A Public Method - (495)
Weakness VariantWeakness Variant Public Data Assigned to Private Array-Typed Field - (496)
Weakness BaseWeakness Base Race Condition in Switch - (365)
Weakness BaseWeakness Base Race Condition within a Thread - (366)
Weakness BaseWeakness Base Reliance on Data/Memory Layout - (188)
Weakness BaseWeakness Base Return of Pointer Value Outside of Expected Range - (466)
Weakness BaseWeakness Base Return of Stack Variable Address - (562)
Weakness ClassWeakness Class Signal Errors - (387)
Weakness BaseWeakness Base Signal Handler Race Condition - (364)
Weakness VariantWeakness Variant Signed to Unsigned Conversion Error - (195)
Weakness VariantWeakness Variant Stack-based Buffer Overflow - (121)
Compound Element: Composite Unbounded Transfer ('Classic Buffer Overflow') - (120)
Weakness BaseWeakness Base Uncaught Exception - (248)
Weakness BaseWeakness Base Unchecked Array Indexing - (129)
Compound Element: Chain Unchecked Return Value to NULL Pointer Dereference - (690)
Weakness VariantWeakness Variant Unsafe Function Call from a Signal Handler - (479)
Weakness VariantWeakness Variant Unsigned to Signed Conversion Error - (196)
Weakness BaseWeakness Base Use After Free - (416)
Weakness VariantWeakness Variant Use of getlogin() in Multithreaded Application - (558)
Weakness ClassWeakness Class Use of Inherently Dangerous Function - (242)
Weakness BaseWeakness Base Use of Pointer Subtraction to Determine Size - (469)
Weakness BaseWeakness Base Use of Potentially Dangerous Function - (676)
Weakness VariantWeakness Variant Use of sizeof() on a Pointer Type - (467)
Weakness VariantWeakness Variant Use of umask() with chmod-style Argument - (560)
Weakness BaseWeakness Base Write-what-where Condition - (123)
Page Last Updated: April 11, 2008
 

CWE is sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security.

This Web site is hosted by The MITRE Corporation.
Copyright 2008, The MITRE Corporation. CWE and the CWE logo are trademarks of The MITRE Corporation.

Contact cwe@mitre.org for more information.
Privacy policy
Terms of use
Contact us