1500
Nature Type ID Name Page
ParentOf 191 Integer Underflow (Wrap or Wraparound) 480
ParentOf 193 Off-by-one Error 486
ParentOf 369 Divide By Zero 913
Relevant to the view "CISQ Quality Measures (2020)" (CWE-1305)
Nature Type ID Name Page
ParentOf 131 Incorrect Calculation of Buffer Size 355
ParentOf 369 Divide By Zero 913
Relevant to the view "CISQ Data Protection Measures" (CWE-1340)
Nature Type ID Name Page
ParentOf 131 Incorrect Calculation of Buffer Size 355
ParentOf 369 Divide By Zero 913
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Technology : Not Technology-Specific (Prevalence = Undetermined)
Likelihood Of Exploit
High
Common Consequences
Scope Impact Likelihood
Availability DoS: Crash, Exit, or Restart
If the incorrect calculation causes the program to move into
an unexpected state, it may lead to a crash or impairment
of service.
Integrity
Confidentiality
Availability
DoS: Crash, Exit, or Restart
DoS: Resource Consumption (Other)
Execute Unauthorized Code or Commands
If the incorrect calculation is used in the context of
resource allocation, it could lead to an out-of-bounds
operation (CWE-119) leading to a crash or even arbitrary
code execution. Alternatively, it may result in an integer
overflow (CWE-190) and / or a resource consumption
problem (CWE-400).
Access Control Gain Privileges or Assume Identity
In the context of privilege or permissions assignment, an
incorrect calculation can provide an attacker with access to
sensitive resources.
Access Control Bypass Protection Mechanism
If the incorrect calculation leads to an insufficient
comparison (CWE-697), it may compromise a protection
mechanism such as a validation routine and allow an
attacker to bypass the security-critical code.
Detection Methods
Manual Analysis
This weakness can be detected using tools and techniques that require manual (human)
analysis, such as penetration testing, threat modeling, and interactive tools that allow the
tester to record and modify an active session. Specifically, manual static analysis is useful for
CWE Version 4.14
CWE-682: Incorrect Calculation
CWE-682: Incorrect Calculation