1326
with "sinks" (destinations where the data interacts with external components, a lower layer such
as the OS, etc.)
Effectiveness = High
Potential Mitigations
Phase: Implementation
Always test your code on any platform on which it is targeted to run on.
Phase: Testing
Test your code on the newest and oldest platform on which it is targeted to run on.
Phase: Testing
Develop a system to test for API functions that are not portable.
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 850 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 7 - Methods (MET)
844 2364
MemberOf 858 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 15 - Serialization (SER)
844 2368
MemberOf 1001 SFP Secondary Cluster: Use of an Improper API 888 2420
MemberOf 1140 SEI CERT Oracle Secure Coding Standard for Java -
Guidelines 06. Methods (MET)
1133 2447
MemberOf 1412 Comprehensive Categorization: Poor Coding Practices 1400 2538
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
The CERT Oracle Secure
Coding Standard for Java
(2011)
MET02-J Do not use deprecated or obsolete
classes or methods
The CERT Oracle Secure
Coding Standard for Java
(2011)
SER00-J Maintain serialization compatibility
during class evolution
Software Fault Patterns SFP3 Use of an improper API
Related Attack Patterns
CAPEC-ID Attack Pattern Name
96 Block Access to Libraries
CWE-590: Free of Memory not on the Heap
Weakness ID : 590
Structure : Simple
Abstraction : Variant
Description
The product calls free() on a pointer to memory that was not allocated using associated heap
allocation functions such as malloc(), calloc(), or realloc().
Extended Description
CWE Version 4.14
CWE-590: Free of Memory not on the Heap
CWE-590: Free of Memory not on the Heap