1541
Reference Description
CVE-2021-43537 Chain: in a web browser, an unsigned 64-bit integer is forcibly cast to a 32-bit
integer (CWE-681) and potentially leading to an integer overflow (CWE-190).
If an integer overflow occurs, this can cause heap memory corruption
(CWE-122)
https://www.cve.org/CVERecord?id=CVE-2021-43537
CVE-2022-3979 Chain: data visualization program written in PHP uses the "!=" operator instead
of the type-strict "!==" operator (CWE-480) when validating hash values,
potentially leading to an incorrect type conversion (CWE-704)
https://www.cve.org/CVERecord?id=CVE-2022-3979
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 737 CERT C Secure Coding Standard (2008) Chapter 4 -
Expressions (EXP)
734 2341
MemberOf 741 CERT C Secure Coding Standard (2008) Chapter 8 -
Characters and Strings (STR)
734 2344
MemberOf 747 CERT C Secure Coding Standard (2008) Chapter 14 -
Miscellaneous (MSC)
734 2350
MemberOf 875 CERT C++ Secure Coding Section 07 - Characters and
Strings (STR)
868 2376
MemberOf 883 CERT C++ Secure Coding Section 49 - Miscellaneous
(MSC)
868 2381
MemberOf 998 SFP Secondary Cluster: Glitch in Computation 888 2419
MemberOf 1003 Weaknesses for Simplified Mapping of Published
Vulnerabilities
1003 2576
MemberOf 1129 CISQ Quality Measures (2016) - Reliability 1128 2440
MemberOf 1157 SEI CERT C Coding Standard - Guidelines 03.
Expressions (EXP)
1154 2455
MemberOf 1158 SEI CERT C Coding Standard - Guidelines 04. Integers
(INT)
1154 2456
MemberOf 1161 SEI CERT C Coding Standard - Guidelines 07.
Characters and Strings (STR)
1154 2458
MemberOf 1306 CISQ Quality Measures - Reliability 1305 2483
MemberOf 1340 CISQ Data Protection Measures 1340 2590
MemberOf 1416 Comprehensive Categorization: Resource Lifecycle
Management
1400 2545
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
CERT C Secure Coding EXP05-C Do not cast away a const qualification
CERT C Secure Coding EXP39-C CWE More
Abstract
Do not access a variable through a
pointer of an incompatible type
CERT C Secure Coding INT31-C CWE More
Abstract
Ensure that integer conversions do not
result in lost or misinterpreted data
CERT C Secure Coding INT36-C CWE More
Abstract
Converting a pointer to integer or
integer to pointer
CERT C Secure Coding STR34-C CWE More
Abstract
Cast characters to unsigned types
before converting to larger integer sizes
CWE Version 4.14
CWE-705: Incorrect Control Flow Scoping
CWE-705: Incorrect Control Flow Scoping