CWE-680 — Integer Overflow to Buffer Overflow
CWE-680: Integer Overflow to Buffer Overflow
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Compound |
| Status | Draft |
| Likelihood of exploit | — |
Description
The product performs a calculation to determine how much memory to allocate, but an integer overflow can occur that causes less memory to be allocated than expected, leading to a buffer overflow.
Common consequences
- Integrity, Availability, Confidentiality: Modify Memory, DoS: Crash, Exit, or Restart, Execute Unauthorized Code or Commands
Mitigations
(none listed)
References
- CWE page: https://cwe.mitre.org/data/definitions/680.html
- CWE list: https://cwe.mitre.org/data/index.html