CWE-787Out-of-bounds Write

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Common consequences

• Integrity→Modify Memory,Execute Unauthorized Code or Commands
  Write operations could cause memory corruption. In some cases, an adversary can modify control data such as return addresses in order to execute unexpected code.
• Availability→DoS: Crash, Exit, or Restart
  Attempting to access out-of-range, invalid, or unauthorized memory could cause the product to crash.
• Other→Unexpected State
  Subsequent write operations can produce undefined or unexpected results.

Potential mitigations

• Requirements
  [object Object]
• Architecture and Design
  [object Object]
• Operation,Build and Compilation
  [object Object]
• Implementation
  [object Object]
• Operation,Build and Compilation
  [object Object]
• Operation
  [object Object]
• Implementation
  Replace unbounded copy functions with analogous functions that support length arguments, such as strcpy with strncpy. Create these if they are not available.

Related CWEs

Recent CVEs classified under this CWE