Skip to content

CWE-466: Return of Pointer Value Outside of Expected Range

Base

A function can return a pointer to memory that is outside of the buffer that the pointer is expected to reference.

Consequences

  • Confidentiality, Integrity: Read Memory, Modify Memory

Recent advisories

  • GHSA-x25x-j4w4-7m59 — Return of Pointer Value Outside of Expected Rang in Jenkins Script Security Plugin

All advisories for CWE-466

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor