1325
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 971 SFP Secondary Cluster: Faulty Pointer Use 888 2405
MemberOf 1416 Comprehensive Categorization: Resource Lifecycle
Management
1400 2545
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
Software Fault Patterns SFP7 Faulty Pointer Use
CWE-589: Call to Non-ubiquitous API
Weakness ID : 589
Structure : Simple
Abstraction : Variant
Description
The product uses an API function that does not exist on all versions of the target platform.
This could cause portability problems or inconsistencies that allow denial of service or other
consequences.
Extended Description
Some functions that offer security features supported by the OS are not available on all versions
of the OS in common use. Likewise, functions are often deprecated or made obsolete for security
reasons and should not be used.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 474 Use of Function with Inconsistent Implementations 1128
Weakness Ordinalities
Indirect :
Common Consequences
Scope Impact Likelihood
Other Quality Degradation
Detection Methods
Automated Static Analysis
Automated static analysis, commonly referred to as Static Application Security Testing (SAST),
can find some instances of this weakness by analyzing source code (or binary/compiled code)
without having to execute it. Typically, this is done by building a model of data flow and control
flow, then searching for potentially-vulnerable patterns that connect "sources" (origins of input)
CWE Version 4.14
CWE-590: Free of Memory not on the Heap
CWE-590: Free of Memory not on the Heap