CWE-680: Integer Overflow to Buffer Overflow
Description
The product performs a calculation to determine how much memory to allocate, but an integer overflow can occur that causes less memory to be allocated than expected, leading to a buffer overflow.
- Abstraction
- CompoundA combination of weaknesses that together create a vulnerability.
- Likelihood of exploit
- Not rated by MITRE
- Status
- Draft
Common consequences
- IntegrityAvailabilityConfidentiality
Modify Memory; DoS: Crash, Exit, or Restart; Execute Unauthorized Code or Commands
Related weaknesses
Parent weaknesses
CAPEC attack patterns that exploit it
- CAPEC-8Buffer Overflow in an API Call
- CAPEC-9Buffer Overflow in Local Command-Line Utilities
- CAPEC-10Buffer Overflow via Environment Variables
- CAPEC-14Client-side Injection-induced Buffer Overflow
- CAPEC-24Filter Failure through Buffer Overflow
- CAPEC-45Buffer Overflow via Symbolic Links
- CAPEC-46Overflow Variables and Tags
- CAPEC-47Buffer Overflow via Parameter Expansion
- CAPEC-67String Format Overflow in syslog()
- CAPEC-92Forced Integer Overflow
- CAPEC-100Overflow Buffers