1599
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 876 CERT C++ Secure Coding Section 08 - Memory
Management (MEM)
868 2376
MemberOf 1172 SEI CERT C Coding Standard - Guidelines 51.
Microsoft Windows (WIN)
1154 2464
MemberOf 1237 SFP Primary Cluster: Faulty Resource Release 888 2482
MemberOf 1399 Comprehensive Categorization: Memory Safety 1400 2525
Notes
Applicable Platform
This weakness is possible in any programming language that allows manual management of
memory.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
CERT C Secure Coding WIN30-C Exact Properly pair allocation and
deallocation functions
Software Fault Patterns SFP12 Faulty Memory Release
References
[REF-657]"boost C++ Library Smart Pointers". < https://www.boost.org/doc/libs/1_38_0/libs/
smart_ptr/smart_ptr.htm >.2023-04-07.
[REF-480]"Valgrind". < http://valgrind.org/ >.
[REF-391]iOS Developer Library. "Transitioning to ARC Release Notes". 2013 August 8. < https://
developer.apple.com/library/archive/releasenotes/ObjectiveC/RN-TransitioningToARC/Introduction/
Introduction.html >.2023-04-07.
CWE-763: Release of Invalid Pointer or Reference
Weakness ID : 763
Structure : Simple
Abstraction : Base
Description
The product attempts to return a memory resource to the system, but it calls the wrong release
function or calls the appropriate release function incorrectly.
Extended Description
This weakness can take several forms, such as:
• The memory was allocated, explicitly or implicitly, via one memory management method and
deallocated using a different, non-compatible function (CWE-762).
• The function calls or memory management routines chosen are appropriate, however they are
used incorrectly, such as in CWE-761.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
CWE Version 4.14
CWE-763: Release of Invalid Pointer or Reference
CWE-763: Release of Invalid Pointer or Reference