1495
Mapped Taxonomy Name Node ID Fit Mapped Node Name
CERT C Secure Coding MEM35-
C
CWE More
Abstract
Allocate sufficient memory for an object
Related Attack Patterns
CAPEC-ID Attack Pattern Name
8 Buffer Overflow in an API Call
9 Buffer Overflow in Local Command-Line Utilities
10 Buffer Overflow via Environment Variables
14 Client-side Injection-induced Buffer Overflow
24 Filter Failure through Buffer Overflow
45 Buffer Overflow via Symbolic Links
46 Overflow Variables and Tags
47 Buffer Overflow via Parameter Expansion
67 String Format Overflow in syslog()
92 Forced Integer Overflow
100 Overflow Buffers
CWE-681: Incorrect Conversion between Numeric Types
Weakness ID : 681
Structure : Simple
Abstraction : Base
Description
When converting from one data type to another, such as long to integer, data can be omitted or
translated in a way that produces unexpected values. If the resulting values are used in a sensitive
context, then dangerous behaviors may occur.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 704 Incorrect Type Conversion or Cast 1538
ParentOf 192 Integer Coercion Error 482
ParentOf 194 Unexpected Sign Extension 491
ParentOf 195 Signed to Unsigned Conversion Error 494
ParentOf 196 Unsigned to Signed Conversion Error 498
ParentOf 197 Numeric Truncation Error 500
CanPrecede 682 Incorrect Calculation 1499
Relevant to the view "Weaknesses for Simplified Mapping of Published
Vulnerabilities" (CWE-1003)
Nature Type ID Name Page
ChildOf 704 Incorrect Type Conversion or Cast 1538
Relevant to the view "CISQ Quality Measures (2020)" (CWE-1305)
Nature Type ID Name Page
ParentOf 194 Unexpected Sign Extension 491
CWE Version 4.14
CWE-681: Incorrect Conversion between Numeric Types
CWE-681: Incorrect Conversion between Numeric Types