326
Reference Description
https://www.cve.org/CVERecord?id=CVE-2022-21668
CVE-2022-0545 Chain: 3D renderer has an integer overflow (CWE-190) leading to write-whatwhere
condition (CWE-123) using a crafted image.
https://www.cve.org/CVERecord?id=CVE-2022-0545
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 970 SFP Secondary Cluster: Faulty Buffer Access 888 2405
MemberOf 1160 SEI CERT C Coding Standard - Guidelines 06. Arrays
(ARR)
1154 2457
MemberOf 1161 SEI CERT C Coding Standard - Guidelines 07.
Characters and Strings (STR)
1154 2458
MemberOf 1399 Comprehensive Categorization: Memory Safety 1400 2525
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
CLASP Write-what-where condition
CERT C Secure Coding ARR30-
C
Imprecise Do not form or use out-of-bounds
pointers or array subscripts
CERT C Secure Coding ARR38-
C
Imprecise Guarantee that library functions do not
form invalid pointers
CERT C Secure Coding STR31-C Imprecise Guarantee that storage for strings has
sufficient space for character data and
the null terminator
CERT C Secure Coding STR32-C Imprecise Do not pass a non-null-terminated
character sequence to a library function
that expects a string
Software Fault Patterns SFP8 Faulty Buffer Access
References
[REF-44]Michael Howard, David LeBlanc and John Viega. "24 Deadly Sins of Software Security".
McGraw-Hill. 2010.
[REF-18]Secure Software, Inc.. "The CLASP Application Security Process". 2005. < https://
cwe.mitre.org/documents/sources/TheCLASPApplicationSecurityProcess.pdf >.
CWE-124: Buffer Underwrite ('Buffer Underflow')
Weakness ID : 124
Structure : Simple
Abstraction : Base
Description
The product writes to a buffer using an index or pointer that references a memory location prior to
the beginning of the buffer.
Extended Description
This typically occurs when a pointer or its index is decremented to a position before the buffer,
when pointer arithmetic results in a position before the beginning of the valid memory location, or
when a negative index is used.
CWE Version 4.14
CWE-124: Buffer Underwrite ('Buffer Underflow')
CWE-124: Buffer Underwrite ('Buffer Underflow')