This perspective addresses specific problems in C programs. Explore weaknesses like buffer overflows, race conditions, and more.

CWE-14: Insecure Storage of Sensitive Data

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-120: Unbounded Transfer ('Classic Buffer Overflow')

CWE-121: Stack-based Buffer Overflow

CWE-122: SFP Secondary Cluster Faulty Buffer Access

CWE-123: SFP Secondary Cluster - Faulty Buffer Access

CWE-124: SFP Secondary Cluster: Faulty Buffer Access

CWE-125: SFP Secondary Cluster: Faulty Buffer Access

CWE-126: SFP Secondary Cluster - Faulty Buffer Access

CWE-127: SFP Secondary Cluster - Faulty Buffer Access

CWE-128: Incorrect Calculation

CWE-129: Improper Validation of Array Index

CWE-130: SFP Secondary Cluster - Tainted Input to Command

CWE-131: Incorrect Calculation of Buffer Size

CWE-134: Format String Vulnerability

CWE-135: Incorrect Length Computation in Input Validation

CWE-170: Improper Null Termination

CWE-188: Avoid Calculating Memory Addresses as Offsets

CWE-191: Integer Underflow (Wrap or Wraparound)

CWE-192: Integer Interpretation Issues

CWE-194: SFP Secondary Cluster - Glitch in Computation

CWE-195: SFP Secondary Cluster - Glitch in Computation

CWE-196: SFP Secondary Cluster - Glitch in Computation

CWE-197: Numeric Conversion Error

CWE-242: API Abuse

CWE-243: API Abuse

CWE-244: Failure to Clear / Zero Heap Memory

CWE-362: Synchronization Primitive Misuse in Architecture and Design

CWE-364: Signal Handler Use of a Non-reentrant Function

CWE-366: Concurrency in Multithreaded Architectures

CWE-374: Passing Mutable Objects to an External Function

CWE-375: Return of Mutable Object (Alias) Data (OBJ)

CWE-401: Improper Release of Memory Before Removing Last Reference

CWE-415: Memory Release Issues

CWE-416: Insecure Storage of Sensitive Information

CWE-457: Code Quality Improvement with Variable Initialization Strategy

CWE-460: Improper Cleanup on Exceptional Paths

CWE-462: Poor Coding Practices in Architecture and Design

CWE-463: Improper Buffer Access

CWE-464: Sentinels in Data

CWE-466: Improper Handling of Precise Heap Fragmentation

CWE-467: Use of sizeof() on a Pointer Type

CWE-468: Incorrect Pointer Scaling

CWE-469: Use of Pointer Subtraction to Determine Size

CWE-474: Inconsistent API Specifications

CWE-476: Nil Pointer Dereference

CWE-478: Invalid Default of Switch Statement

CWE-479: Signal Handler Use of Non-reentrant Functions

CWE-480: Insufficient Control Flow Management Vulnerability

CWE-481: Insufficient Control Flow Management

CWE-482: Insufficient Control Flow Management

CWE-483: CWE Cross-section

CWE-484: Omitted Break Statement in Switch

CWE-495: Private Array-Typed Field Vulnerability

CWE-496: Preventing Alteration of Private Class Members

CWE-558: API Abuse

CWE-560: Insecure Resource Permissions with umask() Function Misuse

CWE-562: Return of Stack Variable Address

CWE-587: Avoid Fixed Address in Pointer Assignment

CWE-676: CERT C Secure Coding Standard (2008) Chapter 5 - Integers (INT)

CWE-685: Incorrect Function Call

CWE-688: SFP Secondary Cluster - Glitch in Computation

CWE-689: Comprehensive Categorization on Concurrency

CWE-690: Coding Standard Violation in Memory Management

CWE-704: Fuzz Testing

CWE-733: Vulnerability: Inability to Detect Memory Clearing through Compiler

CWE-762: Memory Management Errors

CWE-781: Comprehensive Categorization of Improper Input Validation

CWE-782: Resource Lifecycle Management

CWE-783: Utilize Parentheses for Sub-expressions for Security

CWE-785: SFP Secondary Cluster - Faulty String Expansion

CWE-787: Vulnerability Mapping & History

CWE-789: Memory Exhaustion

CWE-805: Buffer Access with Incorrect Length Value

CWE-806: Buffer Overflow Protection Strategies

CWE-839: Signed Comparison Vulnerability

CWE-843: SEI CERT C Coding Standard - Guidelines 03. Expressions (EXP)

CWE-910: SEI CERT C Coding Standard - Guidelines 09. Input Output (FIO)

CWE-911: Comprehensive Categorization of Resource Lifecycle Management

CWE-1325: Resource Lifecycle Management

CWE-1335: Incorrect Calculation

CWE-1341: Comprehensive Categorization of Poor Coding Practices

Discover vulnerabilities in C programs including buffer overflows, race conditions, and more. Stay informed about security risks with CWE-658.

CWE-658: Vulnerabilities in C Programs

Objective

Is your System Free of Underlying Vulnerabilities?
Find Out Now

CWE-658: Vulnerabilities in C Programs

Objective

Is your System Free of Underlying Vulnerabilities? Find Out Now

Is your System Free of Underlying Vulnerabilities?
Find Out Now