CWE-785Variant

Use of Path Manipulation Function without Maximum-sized Buffer

Incomplete in the CWE catalog · 0 CVEs mapped

0
CVEs mapped
What it is

The product invokes a function for normalizing paths or file names, but it provides an output buffer that is smaller than the maximum possible size, such as PATH_MAX.

The record
Technical detail
CWE ID
CWE-785
Abstraction
Variant
Structure
Simple
Status
Incomplete
References (1)
https://samate.nist.gov/SSATTM_Content/papers/Seven%20Pernicious%20Kingdoms%20-%20Taxonomy%20of%20Sw%20Security%20Errors%20-%20Tsipenyuk%20-%20Chess%20-%20McGraw.pdf