478
Reference Description
CVE-2004-2013 Length value of -1 leads to allocation of 0 bytes and resultant heap overflow.
https://www.cve.org/CVERecord?id=CVE-2004-2013
CVE-2017-1000121chain: unchecked message size metadata allows integer overflow (CWE-190)
leading to buffer overflow (CWE-119).
https://www.cve.org/CVERecord?id=CVE-2017-1000121
CVE-2013-1591 Chain: an integer overflow (CWE-190) in the image size calculation causes
an infinite loop (CWE-835) which sequentially allocates buffers without limits
(CWE-1325) until the stack is full.
https://www.cve.org/CVERecord?id=CVE-2013-1591
Functional Areas
• Number Processing
• Memory Management
• Counters
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 738 CERT C Secure Coding Standard (2008) Chapter 5 -
Integers (INT)
734 2342
MemberOf 742 CERT C Secure Coding Standard (2008) Chapter 9 -
Memory Management (MEM)
734 2345
MemberOf 802 2010 Top 25 - Risky Resource Management 800 2354
MemberOf 865 2011 Top 25 - Risky Resource Management 900 2371
MemberOf 872 CERT C++ Secure Coding Section 04 - Integers (INT) 868 2374
MemberOf 876 CERT C++ Secure Coding Section 08 - Memory
Management (MEM)
868 2376
MemberOf 884 CWE Cross-section 884 2567
MemberOf 998 SFP Secondary Cluster: Glitch in Computation 888 2419
MemberOf 1137 SEI CERT Oracle Secure Coding Standard for Java -
Guidelines 03. Numeric Types and Operations (NUM)
1133 2445
MemberOf 1158 SEI CERT C Coding Standard - Guidelines 04. Integers
(INT)
1154 2456
MemberOf 1162 SEI CERT C Coding Standard - Guidelines 08. Memory
Management (MEM)
1154 2458
MemberOf 1200 Weaknesses in the 2019 CWE Top 25 Most Dangerous
Software Errors
1200 2587
MemberOf 1337 Weaknesses in the 2021 CWE Top 25 Most Dangerous
Software Weaknesses
1337 2589
MemberOf 1350 Weaknesses in the 2020 CWE Top 25 Most Dangerous
Software Weaknesses
1350 2594
MemberOf 1387 Weaknesses in the 2022 CWE Top 25 Most Dangerous
Software Weaknesses
1387 2597
MemberOf 1408 Comprehensive Categorization: Incorrect Calculation 1400 2534
MemberOf 1425 Weaknesses in the 2023 CWE Top 25 Most Dangerous
Software Weaknesses
1425 2600
Notes
Relationship
Integer overflows can be primary to buffer overflows.
CWE Version 4.14
CWE-190: Integer Overflow or Wraparound
CWE-190: Integer Overflow or Wraparound