CWE-469Base

Use of Pointer Subtraction to Determine Size

Draft in the CWE catalog · 1 CVE mapped

1
CVEs mapped
6.9
Median CVSS
What it is

The product subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.

Recent examples
6.9cvss
CVE-2019-25595

jetAudio 8.1.7.20702 Basic Denial of Service via URL Handler

jetAudio 8.1.7.20702 Basic contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string through the URL input handler. Attackers can trigger the crash by pasting a buffer of 5000 characters into the Open URL dialog, causing the application to terminate abnormally.

MEDIUMno explanation yet
0%
epss
The record
Technical detail
CWE ID
CWE-469
Abstraction
Base
Structure
Simple
Status
Draft
References (1)