CWE-806Variant

Buffer Access Using Size of Source Buffer

Incomplete in the CWE catalog · 0 CVEs mapped

0
CVEs mapped
What it is

The product uses the size of a source buffer when reading from or writing to a destination buffer, which may cause it to access memory that is outside of the bounds of the buffer.

The record
Technical detail
CWE ID
CWE-806
Abstraction
Variant
Structure
Simple
Status
Incomplete
References (14)
https://learn.microsoft.com/en-us/windows/win32/menurc/strsafe-ovw?redirectedfrom=MSDNhttp://www.gnu-darwin.org/www001/ports-1.5a-CURRENT/devel/safestr/work/safestr-1.0.3/doc/safestr.htmlhttps://learn.microsoft.com/en-us/archive/blogs/michael_howard/address-space-layout-randomization-in-windows-vistahttps://archive.is/saAFohttps://en.wikipedia.org/wiki/Executable_space_protection#PaXhttps://msrc.microsoft.com/blog/2009/06/understanding-dep-as-a-mitigation-technology-part-1/https://www.redhat.com/en/blog/position-independent-executables-piehttps://lwn.net/Articles/190139/http://www.cs.ucr.edu/~nael/pubs/micro16.pdfhttps://d3fend.mitre.org/technique/d3f:StackFrameCanaryValidation/https://d3fend.mitre.org/technique/d3f:SegmentAddressOffsetRandomization/https://d3fend.mitre.org/technique/d3f:ProcessSegmentExecutionPrevention/https://www.blackhat.com/presentations/bh-usa-08/Sotirov_Dowd/bh08-sotirov-dowd.pdfhttps://clang.llvm.org/docs/AddressSanitizer.html