together within software. One weakness, X, can directly create the conditions that are
necessary to cause another weakness, Y, to enter a vulnerable condition. When this
happens, CWE refers to X as PRIMARY to Y, and Y is RESULTANT from X. For example, if
an integer overflow (CWE-190) occurs when calculating the amount of memory to