CWE-681Incorrect Conversion between Numeric Types

Description

When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.

Common consequences

• Other,Integrity→Unexpected State,Quality Degradation
  The program could wind up using the wrong number and generate incorrect results. If the number is used to allocate resources or make a security decision, then this could introduce a vulnerability.

Potential mitigations

• Implementation
  Avoid making conversion between numeric types. Always check for the allowed ranges.

Related CWEs

Recent CVEs classified under this CWE