CWE•Compound•Draft•2 recent CVEs
CWE-680Integer Overflow to Buffer Overflow
Description
The product performs a calculation to determine how much memory to allocate, but an integer overflow can occur that causes less memory to be allocated than expected, leading to a buffer overflow.
Common consequences
- Integrity,Availability,Confidentiality→Modify Memory,DoS: Crash, Exit, or Restart,Execute Unauthorized Code or Commands