The topics addressed in CWE-659 pertain specifically to problems encountered in C++ code, not universally applicable across all languages.

CWE-14: Insecure Storage of Sensitive Data

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-120: Unbounded Transfer ('Classic Buffer Overflow')

CWE-121: Stack-based Buffer Overflow

CWE-122: SFP Secondary Cluster Faulty Buffer Access

CWE-123: SFP Secondary Cluster - Faulty Buffer Access

CWE-124: SFP Secondary Cluster: Faulty Buffer Access

CWE-125: SFP Secondary Cluster: Faulty Buffer Access

CWE-126: SFP Secondary Cluster - Faulty Buffer Access

CWE-127: SFP Secondary Cluster - Faulty Buffer Access

CWE-128: Incorrect Calculation

CWE-129: Improper Validation of Array Index

CWE-130: SFP Secondary Cluster - Tainted Input to Command

CWE-131: Incorrect Calculation of Buffer Size

CWE-134: Format String Vulnerability

CWE-135: Incorrect Length Computation in Input Validation

CWE-170: Improper Null Termination

CWE-188: Avoid Calculating Memory Addresses as Offsets

CWE-191: Integer Underflow (Wrap or Wraparound)

CWE-192: Integer Interpretation Issues

CWE-194: SFP Secondary Cluster - Glitch in Computation

CWE-195: SFP Secondary Cluster - Glitch in Computation

CWE-196: SFP Secondary Cluster - Glitch in Computation

CWE-197: Numeric Conversion Error

CWE-242: API Abuse

CWE-243: API Abuse

CWE-244: Failure to Clear / Zero Heap Memory

CWE-248: API Abuse

CWE-362: Synchronization Primitive Misuse in Architecture and Design

CWE-364: Signal Handler Use of a Non-reentrant Function

CWE-366: Concurrency in Multithreaded Architectures

CWE-374: Passing Mutable Objects to an External Function

CWE-375: Return of Mutable Object (Alias) Data (OBJ)

CWE-396: Automated Static Analysis - Insufficient Control Flow Management

CWE-397: Insufficient Control Flow Management

CWE-401: Improper Release of Memory Before Removing Last Reference

CWE-415: Memory Release Issues

CWE-416: Insecure Storage of Sensitive Information

CWE-457: Code Quality Improvement with Variable Initialization Strategy

CWE-460: Improper Cleanup on Exceptional Paths

CWE-462: Poor Coding Practices in Architecture and Design

CWE-463: Improper Buffer Access

CWE-464: Sentinels in Data

CWE-466: Improper Handling of Precise Heap Fragmentation

CWE-467: Use of sizeof() on a Pointer Type

CWE-468: Incorrect Pointer Scaling

CWE-469: Use of Pointer Subtraction to Determine Size

CWE-476: Nil Pointer Dereference

CWE-478: Invalid Default of Switch Statement

CWE-479: Signal Handler Use of Non-reentrant Functions

CWE-480: Insufficient Control Flow Management Vulnerability

CWE-481: Insufficient Control Flow Management

CWE-482: Insufficient Control Flow Management

CWE-483: CWE Cross-section

CWE-484: Omitted Break Statement in Switch

CWE-493: Encapsulation

CWE-495: Private Array-Typed Field Vulnerability

CWE-496: Preventing Alteration of Private Class Members

CWE-498: Clonable Class

CWE-500: Object Orientation Issues

CWE-543: Thread-Specific Storage Pattern and Multithreading Security

CWE-558: API Abuse

CWE-562: Return of Stack Variable Address

CWE-587: Avoid Fixed Address in Pointer Assignment

CWE-676: CERT C Secure Coding Standard (2008) Chapter 5 - Integers (INT)

CWE-690: Coding Standard Violation in Memory Management

CWE-704: Fuzz Testing

CWE-733: Vulnerability: Inability to Detect Memory Clearing through Compiler

CWE-762: Memory Management Errors

CWE-766: Coding Standard Violation

CWE-767: Improper Validation of Class Accessor Methods

CWE-781: Comprehensive Categorization of Improper Input Validation

CWE-782: Resource Lifecycle Management

CWE-783: Utilize Parentheses for Sub-expressions for Security

CWE-785: SFP Secondary Cluster - Faulty String Expansion

CWE-787: Vulnerability Mapping & History

CWE-789: Memory Exhaustion

CWE-805: Buffer Access with Incorrect Length Value

CWE-806: Buffer Overflow Protection Strategies

CWE-839: Signed Comparison Vulnerability

CWE-843: SEI CERT C Coding Standard - Guidelines 03. Expressions (EXP)

CWE-910: SEI CERT C Coding Standard - Guidelines 09. Input Output (FIO)

CWE-911: Comprehensive Categorization of Resource Lifecycle Management

CWE-1325: Resource Lifecycle Management

CWE-1335: Incorrect Calculation

CWE-1341: Comprehensive Categorization of Poor Coding Practices

Explore CWE-659 for specific problems in C++ code. This category addresses issues not universally applicable across all programming languages. Learn more here.

CWE-659: C++ Code Specific Problems

Objective

Is your System Free of Underlying Vulnerabilities?
Find Out Now

CWE-659: C++ Code Specific Problems

Objective

Is your System Free of Underlying Vulnerabilities? Find Out Now

Is your System Free of Underlying Vulnerabilities?
Find Out Now