CWE-788: Access of Memory Location After End of Buffer

Base

The product reads or writes to a buffer using an index or pointer that references a memory location after the end of the buffer.

This typically occurs when a pointer or its index is incremented to a position after the buffer; or when pointer arithmetic results in a position after the buffer.

Consequences

Confidentiality: Read Memory
Integrity, Availability: Modify Memory, DoS: Crash, Exit, or Restart
Integrity: Modify Memory, Execute Unauthorized Code or Commands

Recent advisories

RUSTSEC-2021-0067 — Memory access due to code generation flaw in Cranelift module

All advisories for CWE-788

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor