CWE

Common Weakness Enumeration

A Community-Developed List of Software Weakness Types

CWE/SANS Top 25 Most Dangerous Software Errors
Home > CWE List > CWE- Individual Dictionary Definition (2.11)  
ID

CWE CATEGORY: SFP Secondary Cluster: Faulty Buffer Access

Category ID: 970
Status: Incomplete
+ Description

Description Summary

This category identifies Software Fault Patterns (SFPs) within the Faulty Buffer Access cluster.
+ Relationships
NatureTypeIDNameView(s) this relationship pertains toView(s)
ChildOfCategoryCategory890SFP Primary Cluster: Memory Access
Software Fault Pattern (SFP) Clusters (primary)888
ParentOfWeakness ClassWeakness Class118Incorrect Access of Indexable Resource ('Range Error')
Software Fault Pattern (SFP) Clusters (primary)888
ParentOfWeakness ClassWeakness Class119Improper Restriction of Operations within the Bounds of a Memory Buffer
Software Fault Pattern (SFP) Clusters (primary)888
ParentOfWeakness BaseWeakness Base120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Software Fault Pattern (SFP) Clusters (primary)888
ParentOfWeakness VariantWeakness Variant121Stack-based Buffer Overflow
Software Fault Pattern (SFP) Clusters (primary)888
ParentOfWeakness VariantWeakness Variant122Heap-based Buffer Overflow
Software Fault Pattern (SFP) Clusters (primary)888
ParentOfWeakness BaseWeakness Base123Write-what-where Condition
Software Fault Pattern (SFP) Clusters (primary)888
ParentOfWeakness BaseWeakness Base124Buffer Underwrite ('Buffer Underflow')
Software Fault Pattern (SFP) Clusters (primary)888
ParentOfWeakness BaseWeakness Base125Out-of-bounds Read
Software Fault Pattern (SFP) Clusters (primary)888
ParentOfWeakness VariantWeakness Variant126Buffer Over-read
Software Fault Pattern (SFP) Clusters (primary)888
ParentOfWeakness VariantWeakness Variant127Buffer Under-read
Software Fault Pattern (SFP) Clusters (primary)888
ParentOfWeakness BaseWeakness Base129Improper Validation of Array Index
Software Fault Pattern (SFP) Clusters (primary)888
+ Content History
Submissions
Submission DateSubmitterOrganizationSource
2014-07-29Internal CWE Team

More information is available — Please select a different filter.
Page Last Updated: May 05, 2017