CWE•Base•Incomplete•5 recent CVEs
CWE-823Use of Out-of-range Pointer Offset
Description
The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.
[object Object]
Common consequences
- Confidentiality→Read MemoryIf the untrusted pointer is used in a read operation, an attacker might be able to read sensitive portions of memory.
- Availability→DoS: Crash, Exit, or RestartIf the untrusted pointer references a memory location that is not accessible to the program, or points to a location that is "malformed" or larger than expected by a read or write operation, the application may terminate unexpectedly.
- Integrity,Confidentiality,Availability→Execute Unauthorized Code or Commands,Modify MemoryIf the untrusted pointer is used in a function call, or points to unexpected data in a write operation, then code execution may be possible.