CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer

Description

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Common consequences

• Integrity,Confidentiality,Availability→Execute Unauthorized Code or Commands,Modify Memory
  If the memory accessible by the attacker can be effectively controlled, it may be possible to execute arbitrary code, as with a standard buffer overflow. If the attacker can overwrite a pointer's worth of memory (usually 32 or 64 bits), the
• Availability,Confidentiality→Read Memory,DoS: Crash, Exit, or Restart,DoS: Resource Consumption (CPU),DoS: Resource Consumption (Memory)
  Out of bounds memory access will very likely result in the corruption of relevant memory, and perhaps instructions, possibly leading to a crash. Other attacks leading to lack of availability are possible, including putting the program into
• Confidentiality→Read Memory
  In the case of an out-of-bounds read, the attacker may have access to sensitive information. If the sensitive information contains system details, such as the current buffer's position in memory, this knowledge can be used to craft further

Potential mitigations

• Requirements
  [object Object]
• Architecture and Design
  [object Object]
• Operation,Build and Compilation
  [object Object]
• Implementation
  [object Object]
• Operation,Build and Compilation
  [object Object]
• Operation
  [object Object]
• Implementation
  Replace unbounded copy functions with analogous functions that support length arguments, such as strcpy with strncpy. Create these if they are not available.

Related CWEs

Recent CVEs classified under this CWE