2210
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1207 Debug and Test Problems 1194 2474
MemberOf 1396 Comprehensive Categorization: Access Control 1400 2519
Related Attack Patterns
CAPEC-ID Attack Pattern Name
150 Collect Data from Common Resource Locations
167 White Box Reverse Engineering
545 Pull Data from System Resources
References
[REF-1150]Jerry Backer, David Hely and Ramesh Karri. "Secure design-for-debug for Systems-on-
Chip". 2015 October 6. < https://ieeexplore.ieee.org/document/7342418 >.
[REF-1151]Jerry Backer, David Hely and Ramesh Karri. "Secure and Flexible Trace-Based
Debugging of Systems-on-Chip". 2016 December. < https://dl.acm.org/doi/pdf/10.1145/2994601
>.2023-04-07.
CWE-1325: Improperly Controlled Sequential Memory Allocation
Weakness ID : 1325
Structure : Simple
Abstraction : Base
Description
The product manages a group of objects or resources and performs a separate memory allocation
for each object, but it does not properly limit the total amount of memory that is consumed by all of
the combined objects.
Extended Description
While the product might limit the amount of memory that is allocated in a single operation for
a single object (such as a malloc of an array), if an attacker can cause multiple objects to be
allocated in separate operations, then this might cause higher total memory consumption than the
developer intended, leading to a denial of service.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 770 Allocation of Resources Without Limits or Throttling 1613
PeerOf 789 Memory Allocation with Excessive Size Value 1674
CanPrecede 476 NULL Pointer Dereference 1132
Weakness Ordinalities
Primary :
Applicable Platforms
CWE Version 4.14
CWE-1325: Improperly Controlled Sequential Memory Allocation
CWE-1325: Improperly Controlled Sequential Memory Allocation