1732
CWE-825: Expired Pointer Dereference
Weakness ID : 825
Structure : Simple
Abstraction : Base
Description
The product dereferences a pointer that contains a location for memory that was previously valid,
but is no longer valid.
Extended Description
When a product releases memory, but it maintains a pointer to that memory, then the memory
might be re-allocated at a later time. If the original pointer is accessed to read or write data, then
this could cause the product to read or modify data that is in use by a different function or process.
Depending on how the newly-allocated memory is used, this could lead to a denial of service,
information exposure, or code execution.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 672 Operation on a Resource after Expiration or Release 1479
ChildOf 119 Improper Restriction of Operations within the Bounds of a
Memory Buffer