8. CWE-829 : Inclusion of Functionality from Untrusted Control Sphere
9. CWE-131 : Incorrect Calculation of Buffer Size
10. CWE-190 : Integer Overflow or Wraparound
11. CWE-306 : Missing Authentication for Critical Function