322
Reference Description
CVE-2021-43537 Chain: in a web browser, an unsigned 64-bit integer is forcibly cast to a 32-bit
integer (CWE-681) and potentially leading to an integer overflow (CWE-190).
If an integer overflow occurs, this can cause heap memory corruption
(CWE-122)
https://www.cve.org/CVERecord?id=CVE-2021-43537
CVE-2007-4268 Chain: integer signedness error (CWE-195) passes signed comparison,
leading to heap overflow (CWE-122)
https://www.cve.org/CVERecord?id=CVE-2007-4268
CVE-2009-2523 Chain: product does not handle when an input string is not NULL terminated
(CWE-170), leading to buffer over-read (CWE-125) or heap-based buffer
overflow (CWE-122).
https://www.cve.org/CVERecord?id=CVE-2009-2523
CVE-2021-29529 Chain: machine-learning product can have a heap-based buffer overflow
(CWE-122) when some integer-oriented bounds are calculated by using
ceiling() and floor() on floating point values (CWE-1339)
https://www.cve.org/CVERecord?id=CVE-2021-29529
CVE-2010-1866 Chain: integer overflow (CWE-190) causes a negative signed value, which
later bypasses a maximum-only check (CWE-839), leading to heap-based
buffer overflow (CWE-122).
https://www.cve.org/CVERecord?id=CVE-2010-1866
Affected Resources
• Memory
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 970 SFP Secondary Cluster: Faulty Buffer Access 888 2405
MemberOf 1161 SEI CERT C Coding Standard - Guidelines 07.
Characters and Strings (STR)
1154 2458
MemberOf 1399 Comprehensive Categorization: Memory Safety 1400 2525
Notes
Relationship
Heap-based buffer overflows are usually just as dangerous as stack-based buffer overflows.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
CLASP Heap overflow
Software Fault Patterns SFP8 Faulty Buffer Access
CERT C Secure Coding STR31-C CWE More Specific Guarantee that storage for strings has
sufficient space for character data and
the null terminator
ISA/IEC 62443 Part 4-2 Req CR 3.5
ISA/IEC 62443 Part 3-3 Req SR 3.5
ISA/IEC 62443 Part 4-1 Req SI-1
ISA/IEC 62443 Part 4-1 Req SI-2
ISA/IEC 62443 Part 4-1 Req SVV-1
ISA/IEC 62443 Part 4-1 Req SVV-3
Related Attack Patterns
CWE Version 4.14
CWE-123: Write-what-where Condition
CWE-123: Write-what-where Condition