493
Observed Examples
Reference Description
CVE-2018-10887 Chain: unexpected sign extension (CWE-194) leads to integer overflow
(CWE-190), causing an out-of-bounds read (CWE-125)
https://www.cve.org/CVERecord?id=CVE-2018-10887
CVE-1999-0234 Sign extension error produces -1 value that is treated as a command
separator, enabling OS command injection.
https://www.cve.org/CVERecord?id=CVE-1999-0234
CVE-2003-0161 Product uses "char" type for input character. When char is implemented as a
signed type, ASCII value 0xFF (255), a sign extension produces a -1 value that
is treated as a program-specific separator value, effectively disabling a length
check and leading to a buffer overflow. This is also a multiple interpretation
error.
https://www.cve.org/CVERecord?id=CVE-2003-0161
CVE-2007-4988 chain: signed short width value in image processor is sign extended during
conversion to unsigned int, which leads to integer overflow and heap-based
buffer overflow.
https://www.cve.org/CVERecord?id=CVE-2007-4988
CVE-2006-1834 chain: signedness error allows bypass of a length check; later sign extension
makes exploitation easier.
https://www.cve.org/CVERecord?id=CVE-2006-1834
CVE-2005-2753 Sign extension when manipulating Pascal-style strings leads to integer
overflow and improper memory copy.
https://www.cve.org/CVERecord?id=CVE-2005-2753
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 998 SFP Secondary Cluster: Glitch in Computation 888 2419
MemberOf 1158 SEI CERT C Coding Standard - Guidelines 04. Integers
(INT)
1154 2456
MemberOf 1416 Comprehensive Categorization: Resource Lifecycle
Management
1400 2545
Notes
Relationship
Sign extension errors can lead to buffer overflows and other memory-based problems. They are
also likely to be factors in other weaknesses that are not based on memory operations, but rely
on numeric calculation.
Maintenance
This entry is closely associated with signed-to-unsigned conversion errors (CWE-195) and other
numeric errors. These relationships need to be more closely examined within CWE.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
CLASP Sign extension error
Software Fault Patterns SFP1 Glitch in computation
CERT C Secure Coding INT31-C CWE More Specific Ensure that integer conversions do not
result in lost or misinterpreted data
References
CWE Version 4.14
CWE-195: Signed to Unsigned Conversion Error
CWE-195: Signed to Unsigned Conversion Error