openshift/ose-rhel-coreos-8

Direct Vulnerabilities

Known vulnerabilities in the openshift/ose-rhel-coreos-8 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Out-of-bounds Write

*
  • H
Improper Preservation of Permissions

*
  • H
Expired Pointer Dereference

*
  • M
Use After Free

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Improper Resource Locking

*
  • M
Incomplete Cleanup

*
  • M
Improper Control of a Resource Through its Lifetime

*
  • H
Incorrect Default Permissions

*
  • M
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Use After Free

*
  • M
Out-of-bounds Read

*
  • L
Time-of-check Time-of-use (TOCTOU)

*
  • M
Information Exposure

*
  • H
Expired Pointer Dereference

*
  • M
Divide By Zero

*
  • M
Improper Input Validation

*
  • H
Expired Pointer Dereference

*
  • H
Out-of-bounds Read

*
  • M
NULL Pointer Dereference

*
  • H
Out-of-bounds Read

*
  • L
Information Exposure

*
  • M
Expired Pointer Dereference

*
  • L
Exposure of System Data to an Unauthorized Control Sphere

*
  • M
Information Exposure

*
  • H
Expired Pointer Dereference

*
  • M
Improper Input Validation

*
  • M
Out-of-bounds Read

*
  • M
Use of Uninitialized Resource

*
  • M
Out-of-bounds Read

*
  • M
Improper Resource Locking

*
  • M
Out-of-bounds Read

*
  • M
Integer Underflow

*
  • M
Out-of-bounds Write

*
  • M
Use of Uninitialized Variable

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • M
Information Exposure

*
  • M
Use of Uninitialized Variable

*
  • M
Out-of-bounds Read

*
  • M
Information Exposure

*
  • M
Use of Uninitialized Variable

*
  • M
Expired Pointer Dereference

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
Integer Overflow or Wraparound

*
  • L
Deadlock

*
  • M
Use of Uninitialized Resource

*
  • L
Access of Uninitialized Pointer

*
  • M
Missing Initialization of Resource

*
  • M
Out-of-bounds Write

*
  • H
Incorrect Default Permissions

*
  • H
Out-of-bounds Write

*
  • M
NULL Pointer Dereference

*
  • M
Out-of-bounds Write

*
  • M
Expired Pointer Dereference

*
  • H
Algorithmic Complexity

*
  • M
Incomplete Blacklist

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Use of Uninitialized Resource

*
  • M
Out-of-bounds Write

*
  • H
Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

*
  • L
Authentication Bypass

*
  • M
Out-of-bounds Write

*
  • H
Out-of-bounds Write

*
  • H
Out-of-bounds Read

*
  • M
Out-of-bounds Write

*
  • H
Access of Uninitialized Pointer

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Improper Locking

*
  • M
Expired Pointer Dereference

*
  • M
Incomplete Cleanup

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • H
NULL Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
Deadlock

*
  • M
Out-of-bounds Read

*
  • H
NULL Pointer Dereference

*
  • M
Reachable Assertion

*
  • M
Race Condition

*
  • M
NULL Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • M
Improper Validation of Specified Type of Input

*
  • M
Integer Overflow or Wraparound

*
  • M
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • M
Incorrect Synchronization

*
  • M
Out-of-bounds Read

*
  • M
Use of Uninitialized Resource

*
  • M
Expired Pointer Dereference

*
  • L
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • L
Improper Update of Reference Count

*
  • M
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Divide By Zero

*
  • M
Incorrect Synchronization

*
  • M
Out-of-bounds Write

*
  • M
Missing Lock Check

*
  • M
Exposure of System Data to an Unauthorized Control Sphere

*
  • M
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • M
Race Condition

*
  • M
Untrusted Pointer Dereference

*
  • M
Use of Uninitialized Resource

*
  • M
Directory Traversal

*
  • M
Out-of-bounds Read

*
  • M
Divide By Zero

*
  • M
Out-of-bounds Read

*
  • L
Use of Uninitialized Resource

*
  • H
Out-of-bounds Write

*
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
OS Command Injection

*
  • M
Integer Overflow or Wraparound

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Write

*
  • M
Expired Pointer Dereference

*
  • M
Information Exposure

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Race Condition

*
  • L
Improper Preservation of Permissions

*
  • H
Out-of-bounds Write

*
  • M
Improper Input Validation

*
  • L
Race Condition

*
  • M
NULL Pointer Dereference

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Improper Resource Locking

*
  • M
NULL Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • L
Exposure of System Data to an Unauthorized Control Sphere

*
  • M
Missing Initialization of Resource

*
  • M
Improper Validation of Specified Quantity in Input

*
  • L
Reachable Assertion

*
  • M
Integer Overflow or Wraparound

*
  • M
Expired Pointer Dereference

*
  • M
CVE-2026-99206

*
  • L
Improper Verification of Source of a Communication Channel

*
  • M
Out-of-bounds Read

*
  • M
Integer Overflow or Wraparound

*
  • M
Use After Free

*
  • M
Expired Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
Race Condition

*
  • M
Expired Pointer Dereference

*
  • M
Reachable Assertion

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Information Exposure

*
  • M
Information Exposure

*
  • M
NULL Pointer Dereference

*
  • M
Divide By Zero

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Use of Uninitialized Resource

*
  • M
Unintended Reentrant Invocation of Non-reentrant Code Via Nested Calls

*
  • M
Incomplete Cleanup

*
  • M
Out-of-bounds Read

*
  • H
Race Condition

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Improper Validation of Specified Index, Position, or Offset in Input

*
  • M
Origin Validation Error

*
  • M
Out-of-bounds Read

*
  • M
Use After Free

*
  • M
NULL Pointer Dereference

*
  • L
Premature Release of Resource During Expected Lifetime

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
NULL Pointer Dereference

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Use After Free

*
  • M
Expired Pointer Dereference

*
  • M
Numeric Truncation Error

*
  • M
Files or Directories Accessible to External Parties

*
  • M
Use of Uninitialized Resource

*
  • M
Improper Preservation of Permissions

*
  • M
NULL Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Reachable Assertion

*
  • L
Incorrect Conversion between Numeric Types

*
  • L
Out-of-bounds Read

*
  • M
NULL Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
Race Condition

*
  • M
Deadlock

*
  • M
Use After Free

*
  • M
NULL Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • L
Use of Uninitialized Resource

*
  • M
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • M
Deadlock

*
  • M
Incomplete Cleanup

*
  • L
Time-of-check Time-of-use (TOCTOU)

*
  • L
Race Condition

*
  • M
NULL Pointer Dereference

*
  • M
Comparison Using Wrong Factors

*
  • M
Expired Pointer Dereference

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Deadlock

*
  • M
Incorrect Synchronization

*
  • M
Improper Preservation of Permissions

*
  • M
Out-of-bounds Write

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Files or Directories Accessible to External Parties

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Deadlock

*
  • M
Premature Release of Resource During Expected Lifetime

*
  • M
Function Call with Incorrectly Specified Arguments

*
  • M
Out-of-bounds Read

*
  • L
Out-of-bounds Read

*
  • M
Buffer Overflow

*
  • L
Missing Authorization

*
  • L
Use of Uninitialized Resource

*
  • M
Use After Free

*
  • M
Improper Input Validation

*
  • H
Insufficient Verification of Data Authenticity

*
  • M
Resource Exhaustion

*
  • M
Operation on a Resource after Expiration or Release

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Write

*
  • M
Use After Free

*
  • M
Resource Exhaustion

*
  • M
Out-of-bounds Write

*
  • H
External Control of File Name or Path

*
  • M
Out-of-bounds Write

*
  • M
Operation on a Resource after Expiration or Release

*
  • M
NULL Pointer Dereference

*
  • H
Out-of-bounds Write

*
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
Improper Input Validation

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • M
Insufficient Session Expiration

*
  • M
Out-of-bounds Write

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Missing Encryption of Sensitive Data

*
  • M
Improper Input Validation

*
  • M
Use After Free

*
  • M
Improper Input Validation

*
  • M
Release of Invalid Pointer or Reference

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • M
Use After Free

*
  • M
Improper Input Validation

*
  • M
Integer Overflow or Wraparound

*
  • M
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Expired Pointer Dereference

*
  • M
Improper Validation of Consistency within Input

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • M
Integer Underflow

*
  • M
Incorrectly Specified Destination in a Communication Channel

*
  • M
CVE-2026-98855

*
  • M
Integer Overflow or Wraparound

*
  • M
Improper Validation of Specified Index, Position, or Offset in Input

*
  • M
NULL Pointer Dereference

*
  • L
Improper Update of Reference Count

*
  • M
Out-of-bounds Write

*
  • M
Detection of Error Condition Without Action

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Write

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
CVE-2026-98823

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • M
Out-of-bounds Read

*
  • H
Reusing a Nonce

*
  • M
Race Condition

*
  • M
Out-of-bounds Read

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Improper Control of a Resource Through its Lifetime

*
  • M
Out-of-bounds Write

*
  • M
Improper Input Validation

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Write

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Improper Input Validation

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Improper Control of a Resource Through its Lifetime

*
  • M
Improper Control of a Resource Through its Lifetime

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • M
Use After Free

*
  • M
Improper Input Validation

*
  • M
Expired Pointer Dereference

*
  • H
Privilege Context Switching Error

*
  • H
Incomplete Cleanup

*
  • L
Use of Uninitialized Resource

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Expired Pointer Dereference

*
  • H
Out-of-bounds Write

*
  • L
Missing Synchronization

*
  • M
Excessive Platform Resource Consumption within a Loop

*
  • L
Out-of-bounds Read

*
  • M
CVE-2026-98719

*
  • M
Expired Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Incorrect Bitwise Shift of Integer

*
  • M
Unchecked Return Value

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Exposure of System Data to an Unauthorized Control Sphere

*
  • M
Race Condition

*
  • M
Divide By Zero

*
  • M
Access of Uninitialized Pointer

*
  • M
Reachable Assertion

*
  • M
Expired Pointer Dereference

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Use After Free

*
  • M
Race Condition

*
  • L
Use of Uninitialized Resource

*
  • M
Reachable Assertion

*
  • M
Race Condition

*
  • L
Unchecked Input for Loop Condition

*
  • L
Missing Initialization of Resource

*
  • M
Expired Pointer Dereference

*
  • M
Race Condition

*
  • M
Race Condition

*
  • M
Expired Pointer Dereference

*
  • H
Race Condition

*
  • L
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • H
Reachable Assertion

*
  • M
NULL Pointer Dereference

*
  • H
Reachable Assertion

*
  • M
NULL Pointer Dereference

*
  • H
Race Condition

*
  • M
Out-of-bounds Read

*
  • M
NULL Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • L
Improper Handling of Case Sensitivity

*
  • M
NULL Pointer Dereference

*
  • L
Deadlock

*
  • M
Improper Validation of Array Index

*
  • M
NULL Pointer Dereference

*
  • L
Reachable Assertion

*
  • C
Improper Certificate Validation

*
  • M
Integer Overflow or Wraparound

*
  • M
Use After Free

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • L
Improper Neutralization

*
  • M
Inappropriate Encoding for Output Context

*
  • L
Insecure Default Initialization of Resource

*
  • L
NULL Pointer Dereference

*
  • H
Out-of-bounds Write

*
  • L
Information Exposure

*
  • L
Out-of-bounds Write

*
  • L
Improper Certificate Validation

*
  • L
Directory Traversal

*
  • M
Uncontrolled Recursion

*
  • M
Improper Certificate Validation

*
  • L
Out-of-Bounds

*
  • M
Heap-based Buffer Overflow

*
  • L
Covert Timing Channel

*
  • L
Use After Free

*
  • L
Comparison Using Wrong Factors

*
  • L
Use After Free

*
  • M
Directory Traversal

*
  • L
Heap-based Buffer Overflow

*
  • L
Inappropriate Encoding for Output Context

*
  • L
Out-of-bounds Read

*
  • L
Heap-based Buffer Overflow

*
  • L
Double Free

*
  • L
Heap-based Buffer Overflow

*
  • L
Use After Free

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Improperly Implemented Security Check for Standard

*
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Improper Update of Reference Count

*
  • M
Buffer Underflow

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Use After Free

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Out-of-bounds Read

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Reachable Assertion

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
NULL Pointer Dereference

*
  • H
Out-of-bounds Write

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Expired Pointer Dereference

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Improper Update of Reference Count

*
  • M
Improper Validation of Unsafe Equivalence in Input

*
  • M
Out-of-bounds Write

*
  • M
Improper Update of Reference Count

*
  • H
Expired Pointer Dereference

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Expired Pointer Dereference

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Use of Multiple Resources with Duplicate Identifier

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • H
Integer Underflow

*
  • L
Incorrect Conversion between Numeric Types

*
  • M
Out-of-bounds Read

*
  • M
NULL Pointer Dereference

*
  • M
Improper Input Validation

*
  • M
Expired Pointer Dereference

*
  • M
Premature Release of Resource During Expected Lifetime

*
  • M
Integer Overflow or Wraparound

*
  • M
Improper Input Validation

*
  • M
CVE-2026-98515

*
  • L
Improper Update of Reference Count

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Read

*
  • H
Cleartext Transmission of Sensitive Information

*
  • L
Improper Update of Reference Count

*
  • L
Reachable Assertion

*
  • M
Incomplete Cleanup

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Improper Validation of Specified Quantity in Input

*
  • H
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • L
Out-of-bounds Read

*
  • L
NULL Pointer Dereference

*
  • M
Improper Input Validation

*
  • L
Deadlock

*
  • M
Expired Pointer Dereference

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Improper Handling of Highly Compressed Data (Data Amplification)

*
  • L
Off-by-one Error

*
  • L
Uncaught Exception

*
  • M
Improper Validation of Specified Quantity in Input

*
  • M
Out-of-bounds Read

*
  • M
Use After Free

*
  • M
Expired Pointer Dereference

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Divide By Zero

*
  • M
Use After Free

*
  • L
Divide By Zero

*
  • M
Use After Free

*
  • M
Access of Uninitialized Pointer

*
  • M
Improper Update of Reference Count

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Deadlock

*
  • M
Out-of-bounds Read

*
  • M
Use After Free

*
  • M
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • M
Use After Free

*
  • L
Incorrect Synchronization

*
  • M
Buffer Access with Incorrect Length Value

*
  • M
NULL Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Write

*
  • M
Use After Free

*
  • L
NULL Pointer Dereference

*
  • M
Use After Free

*
  • L
Incorrect Synchronization

*
  • M
Expired Pointer Dereference

*
  • M
Use After Free

*
  • M
Incorrect Check of Function Return Value

*
  • M
Off-by-one Error

*
  • L
Access of Uninitialized Pointer

*
  • L
File Descriptor Leak

*
  • M
Use After Free

*
  • M
Expired Pointer Dereference

*
  • M
Race Condition

*
  • L
NULL Pointer Dereference

*
  • M
Out-of-bounds Write

*
  • M
Memory Leak

*
  • L
NULL Pointer Dereference

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Out-of-bounds Read

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Access of Uninitialized Pointer

*
  • M
Premature Release of Resource During Expected Lifetime

*
  • L
Return of Wrong Status Code

*
  • L
Incorrect Calculation of Buffer Size

*
  • M
Uncontrolled Recursion

*
  • M
Use After Free

*
  • M
Improper Validation of Specified Index, Position, or Offset in Input

*
  • M
Out-of-bounds Read

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • L
NULL Pointer Dereference

*
  • M
Use After Free

*
  • M
Improper Input Validation

*
  • L
Release of Invalid Pointer or Reference

*
  • M
Out-of-bounds Write

*
  • L
Time-of-check Time-of-use (TOCTOU)

*
  • L
NULL Pointer Dereference

*
  • L
Incorrect Bitwise Shift of Integer

*
  • L
Buffer Access with Incorrect Length Value

*
  • L
Missing Default Case in Switch Statement

*
  • L
Use of Out-of-range Pointer Offset

*
  • L
Access of Uninitialized Pointer

*
  • L
Incorrect Calculation of Buffer Size

*
  • L
NULL Pointer Dereference

*
  • L
Access of Uninitialized Pointer

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Missing Lock Check

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Allocation of Resources Without Limits or Throttling

*
  • L
Race Condition

*
  • L
Release of Invalid Pointer or Reference

*
  • M
Expired Pointer Dereference

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Incomplete Cleanup

*
  • L
Incomplete Model of Endpoint Features

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • L
Improper Update of Reference Count

*
  • L
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • L
Incomplete Cleanup

*
  • M
Directory Traversal

*
  • M
Out-of-bounds Read

*
  • L
OS Command Injection

*
  • M
Improper Handling of Highly Compressed Data (Data Amplification)

*
  • L
Information Exposure

*
  • M
Out-of-bounds Write

*
  • C
Expired Pointer Dereference

*
  • M
Use of Uninitialized Resource

*
  • L
Reachable Assertion

*
  • H
Incorrect Conversion between Numeric Types

*
  • M
Improper Input Validation

*
  • M
Out-of-bounds Read

*
  • H
Out-of-bounds Read

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Read

*
  • M
Improper Control of a Resource Through its Lifetime

*
  • M
Reachable Assertion

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Excessive Platform Resource Consumption within a Loop

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Resource Exhaustion

*
  • M
Improper Validation of Specified Index, Position, or Offset in Input

*
  • L
Integer Overflow or Wraparound

*
  • L
Reachable Assertion

*
  • L
NULL Pointer Dereference

*
  • L
Unchecked Return Value

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • L
Reachable Assertion

*
  • L
Reachable Assertion

*
  • H
Out-of-bounds Write

*
  • M
Integer Overflow or Wraparound

*
  • L
NULL Pointer Dereference

*
  • M
Use After Free

*
  • M
Improper Input Validation

*
  • M
Out-of-bounds Read

*
  • L
Reachable Assertion

*
  • M
Use After Free

*
  • L
Expired Pointer Dereference

*
  • M
Use After Free

*
  • L
NULL Pointer Dereference

*
  • L
Use of Function with Inconsistent Implementations

*
  • L
Incorrect Bitwise Shift of Integer

*
  • M
NULL Pointer Dereference

*
  • L
Missing Lock Check

*
  • L
NULL Pointer Dereference

*
  • M
Information Exposure

*
  • M
NULL Pointer Dereference

*
  • M
Improper Input Validation

*
  • L
Integer Overflow or Wraparound

*
  • M
Resource Exhaustion

*
  • M
NULL Pointer Dereference

*
  • M
Integer Overflow or Wraparound

*
  • M
Integer Overflow or Wraparound

*
  • M
NULL Pointer Dereference

*
  • L
Unchecked Input for Loop Condition

*
  • M
Use After Free

*
  • M
Integer Overflow or Wraparound

*
  • M
Expired Pointer Dereference

*
  • M
Use After Free

*
  • M
Incorrect Synchronization

*
  • M
Improper Input Validation

*
  • M
Improper Check or Handling of Exceptional Conditions

*
  • M
Use of Uninitialized Resource

*
  • M
Improper Update of Reference Count

*
  • M
Multiple Locks of a Critical Resource

*
  • M
Information Exposure

*
  • L
NULL Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
Integer Overflow or Wraparound

*
  • M
Race Condition

*
  • M
Integer Overflow or Wraparound

*
  • M
Use of Uninitialized Variable

*
  • M
Out-of-bounds Read

*
  • L
Improper Handling of Length Parameter Inconsistency

*
  • M
Incorrect Calculation of Buffer Size

*
  • L
Incorrect Calculation of Buffer Size

*
  • M
Improper Control of a Resource Through its Lifetime

*
  • M
NULL Pointer Dereference

*
  • L
Time-of-check Time-of-use (TOCTOU)

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Improper Input Validation

*
  • M
NULL Pointer Dereference

*
  • M
Use After Free

*
  • H
Incorrect Privilege Assignment

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Race Condition

*
  • L
Use of Uninitialized Resource

*
  • M
Use After Free

*
  • L
Integer Overflow or Wraparound

*
  • M
Use of Uninitialized Resource

*
  • M
Use of Out-of-range Pointer Offset

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Access of Uninitialized Pointer

*
  • L
NULL Pointer Dereference

*
  • L
Incomplete Cleanup

*
  • L
NULL Pointer Dereference

*
  • M
Race Condition

*
  • M
Improper Update of Reference Count

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Expired Pointer Dereference

*
  • H
Arbitrary Argument Injection

*
  • L
Integer Overflow or Wraparound

*
  • M
Release of Invalid Pointer or Reference

*
  • M
Incorrect Check of Function Return Value

*
  • L
Divide By Zero

*
  • M
NULL Pointer Dereference

*
  • M
Use After Free

*
  • M
Expired Pointer Dereference

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
NULL Pointer Dereference

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Improper Input Validation

*
  • M
Use After Free

*
  • M
Reachable Assertion

*
  • M
Improper Access Control

*
  • M
Use After Free

*
  • M
Out-of-bounds Read

*
  • M
Deadlock

*
  • M
Expired Pointer Dereference

*
  • M
Use After Free

*
  • M
Expired Pointer Dereference

*
  • M
Improper Resource Locking

*
  • L
Race Condition

*
  • M
Use After Free

*
  • M
Missing Initialization of Resource

*
  • L
Incorrect Calculation of Buffer Size

*
  • M
Expired Pointer Dereference

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Out-of-bounds Write

*
  • M
Use After Free

*
  • M
Expired Pointer Dereference

*
  • L
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
Out-of-bounds Write

*
  • M
Race Condition

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Improper Input Validation

*
  • M
NULL Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • L
Reachable Assertion

*
  • M
Use After Free

*
  • L
Race Condition

*
  • M
Use After Free

*
  • L
Out-of-bounds Read

*
  • M
Use of Uninitialized Variable

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Use After Free

*
  • M
Use After Free

*
  • L
NULL Pointer Dereference

*
  • L
NULL Pointer Dereference

*
  • M
Divide By Zero

*
  • M
Use After Free

*
  • M
Use After Free

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Improper Preservation of Permissions

*
  • M
Incorrect Authorization

*
  • H
Out-of-bounds Write

*
  • M
Use After Free

*
  • M
Use of Uninitialized Resource

*
  • M
Out-of-bounds Write

*
  • M
Information Exposure

*
  • L
Use of Uninitialized Resource

*
  • H
Expired Pointer Dereference

*
  • L
Out-of-bounds Write

*
  • L
Integer Underflow

*
  • M
Reachable Assertion

*
  • L
Improper Update of Reference Count

*
  • M
Reachable Assertion

*
  • M
Out-of-bounds Read

*
  • M
Race Condition

*
  • M
Integer Overflow or Wraparound

*
  • M
Use After Free

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Reachable Assertion

*
  • L
Incomplete Cleanup

*
  • L
Allocation of Resources Without Limits or Throttling

*
  • M
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • M
Improper Certificate Validation

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Improper Certificate Validation

*
  • M
Improper Certificate Validation

*
  • M
Improper Validation of Specified Quantity in Input

*
  • L
Exposure of Data Element to Wrong Session

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
Out-of-bounds Read

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
NULL Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Race Condition

*
  • M
Out-of-bounds Read

*
  • M
Improper Input Validation

*
  • M
Out-of-bounds Read

*
  • H
Improper Update of Reference Count

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • H
Incorrect Privilege Assignment

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • H
Race Condition

*
  • H
Expired Pointer Dereference

*
  • H
Expired Pointer Dereference

*
  • H
Expired Pointer Dereference

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • H
Expired Pointer Dereference

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Return of Wrong Status Code

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
NULL Pointer Dereference

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • H
Information Exposure Through Caching

*
  • H
Race Condition

*
  • H
Expired Pointer Dereference

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
Improper Verification of Source of a Communication Channel

*
  • H
Expired Pointer Dereference

*
  • H
Use of Uninitialized Resource

*
  • H
Out-of-bounds Write

*
  • H
Expired Pointer Dereference

*
  • H
Expired Pointer Dereference

*
  • M
Incorrect Behavior Order: Early Amplification

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Out-of-bounds Read

*
  • M
Improper Neutralization

*
  • L
Link Following

*
  • M
Off-by-one Error

*
  • M
Out-of-bounds Read

*
  • M
NULL Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Comparison Using Wrong Factors

*
  • L
Out-of-bounds Read

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Write

*
  • M
NULL Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • L
Incomplete Cleanup

*
  • L
Information Exposure Through Caching

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Reachable Assertion

*
  • M
Unchecked Input for Loop Condition

*
  • M
Use After Free

*
  • M
Memory Leak

*
  • M
Out-of-bounds Read

*
  • L
Incorrect Conversion between Numeric Types

*
  • M
Expired Pointer Dereference

*
  • L
Improper Validation of Specified Quantity in Input

*
  • M
Use After Free

*
  • M
Deadlock

*
  • M
Out-of-bounds Read

*
  • M
Use After Free

*
  • M
Use of Uninitialized Resource

*
  • M
Out-of-bounds Read

*
  • M
Buffer Underflow

*
  • M
Expired Pointer Dereference

*
  • L
Reachable Assertion

*
  • L
Improper Update of Reference Count

*
  • M
Expired Pointer Dereference

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Use of Uninitialized Resource

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Improper Input Validation

*
  • M
Expired Pointer Dereference

*
  • L
Use of Uninitialized Resource

*
  • M
Out-of-bounds Read

*
  • L
Incorrect Calculation of Buffer Size

*
  • M
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • L
Race Condition

*
  • M
Use After Free

*
  • M
Exposure of Private Information ('Privacy Violation')

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Expired Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • L
Unchecked Input for Loop Condition

*
  • L
Allocation of Resources Without Limits or Throttling

*
  • M
Out-of-bounds Write

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Unchecked Return Value

*
  • M
Out-of-bounds Write

*
  • M
Use After Free

*
  • M
Comparison Using Wrong Factors

*
  • M
Detection of Error Condition Without Action

*
  • M
Reachable Assertion

*
  • M
Out-of-bounds Read

*
  • M
Use After Free

*
  • M
Expired Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • L
Excessive Reliance on Global Variables

*
  • L
NULL Pointer Dereference

*
  • L
Race Condition

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Expired Pointer Dereference

*
  • M
Incorrect Conversion between Numeric Types

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Race Condition

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • L
NULL Pointer Dereference

*
  • L
Improper Update of Reference Count

*
  • L
Incomplete Cleanup

*
  • L
Reachable Assertion

*
  • L
Deadlock

*
  • M
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Use After Free

*
  • L
Use of Uninitialized Resource

*
  • M
Improper Resource Locking

*
  • M
Out-of-bounds Write

*
  • H
External Control of System or Configuration Setting

*
  • L
Expired Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • L
Out-of-bounds Read

*
  • M
NULL Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • L
NULL Pointer Dereference

*
  • M
Use After Free

*
  • L
NULL Pointer Dereference

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Race Condition

*
  • M
Numeric Range Comparison Without Minimum Check

*
  • M
Use After Free

*
  • M
Use of Uninitialized Resource

*
  • M
Use After Free

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Origin Validation Error

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • M
Use of Uninitialized Resource

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • M
Divide By Zero

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Out-of-bounds Write

*
  • M
Expired Pointer Dereference

*
  • L
Allocation of Resources Without Limits or Throttling

*
  • M
Expired Pointer Dereference

*
  • M
Improper Update of Reference Count

*
  • M
Information Exposure

*
  • M
Out-of-bounds Read

*
  • M
Untrusted Pointer Dereference

*
  • L
Improper Enforcement of Behavioral Workflow

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Out-of-bounds Write

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Expired Pointer Dereference

*
  • M
Improper Access Control

*
  • M
Improper Resource Locking

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • L
Expired Pointer Dereference

*
  • L
Incomplete Cleanup

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Race Condition

*
  • H
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Use of Uninitialized Resource

*
  • M
Improper Validation of Integrity Check Value

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Buffer Access with Incorrect Length Value

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Improper Validation of Specified Quantity in Input

*
  • M
Expired Pointer Dereference

*
  • M
Missing Lock Check

*
  • H
Out-of-bounds Read

*
  • M
Information Exposure

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Write

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Information Exposure

*
  • M
Information Exposure

*
  • M
Algorithmic Complexity

*
  • L
Allocation of Resources Without Limits or Throttling

*
  • L
Expected Behavior Violation

*
  • M
Integer Overflow or Wraparound

*
  • H
Out-of-bounds Write

*
  • M
Inappropriate Encoding for Output Context

*
  • M
Incomplete Cleanup

*
  • M
Improper Cross-boundary Removal of Sensitive Data

*
  • M
Expired Pointer Dereference

*
  • L
Incorrect Bitwise Shift of Integer

*
  • M
Integer Underflow

*
  • L
Missing Synchronization

*
  • M
Out-of-bounds Write

*
  • L
Deadlock

*
  • M
Out-of-bounds Read

*
  • M
Improper Validation of Specified Quantity in Input

*
  • M
Out-of-bounds Read

*
  • M
NULL Pointer Dereference

*
  • L
Deadlock

*
  • M
Out-of-bounds Write

*
  • L
Incorrect Conversion between Numeric Types

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Write

*
  • M
Multiple Locks of a Critical Resource

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Missing Report of Error Condition

*
  • M
Out-of-bounds Read

*
  • H
Use After Free

*
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • H
Out-of-bounds Read

*
  • L
Improper Update of Reference Count

*
  • L
Improper Update of Reference Count

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Out-of-bounds Read

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • H
Improper Handling of Unicode Encoding

*
  • M
Buffer Overflow

*
  • H
Resource Exhaustion

*
  • H
Out-of-bounds Read

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Improper Handling of Insufficient Permissions or Privileges

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Improper Validation of Specified Quantity in Input

*
  • H
Improper Control of Dynamically-Identified Variables

*
  • M
Out-of-bounds Write

*
  • M
NULL Pointer Dereference

*
  • L
Trust Boundary Violation

*
  • H
Out-of-bounds Write

*
  • H
Heap-based Buffer Overflow

*
  • M
Out-of-bounds Write

*
  • M
NULL Pointer Dereference

*
  • L
Buffer Access with Incorrect Length Value

*
  • L
Out-of-bounds Write

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
Out-of-bounds Write

*
  • M
Comparison Using Wrong Factors

*
  • H
Reachable Assertion

*
  • M
Authentication Bypass

*
  • M
Excessive Platform Resource Consumption within a Loop

*
  • L
Incorrect Implementation of Authentication Algorithm

*
  • M
Improper Handling of Inconsistent Special Elements

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Origin Validation Error

*
  • H
Reachable Assertion

*
  • L
Use After Free

*
  • M
Improper Verification of Cryptographic Signature

*
  • H
Integer Overflow or Wraparound

*
  • M
NULL Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • L
NULL Pointer Dereference

*
  • L
Excessive Platform Resource Consumption within a Loop

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Write

*
  • L
Improper Update of Reference Count

*
  • L
Information Exposure

*
  • M
Buffer Access with Incorrect Length Value

*
  • M
Buffer Access with Incorrect Length Value

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Out-of-bounds Write

*
  • L
Incorrect Synchronization

*
  • M
NULL Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • M
Integer Underflow

*
  • M
Incorrect Synchronization

*
  • L
Out-of-bounds Read

*
  • M
Out-of-bounds Write

*
  • M
Improper Input Validation

*
  • M
Improper Validation of Specified Index, Position, or Offset in Input

*
  • M
Operation on a Resource after Expiration or Release

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Link Following

*
  • M
Link Following

*
  • M
Integer Overflow or Wraparound

*
  • L
Improper Update of Reference Count

*
  • L
NULL Pointer Dereference

*
  • L
NULL Pointer Dereference

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Time-of-check Time-of-use (TOCTOU)

*
  • L
Allocation of Resources Without Limits or Throttling

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • H
Algorithmic Complexity

*
  • M
NULL Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
Buffer Access with Incorrect Length Value

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Use After Free

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Information Exposure

*
  • M
Buffer Overflow

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Out-of-bounds Read

*
  • M
Directory Traversal

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Out-of-bounds Read

*
  • M
Buffer Overflow

*
  • H
Incomplete Cleanup

*
  • M
Expired Pointer Dereference

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • H
Expired Pointer Dereference

*
  • M
Out-of-bounds Write

*
  • M
Improper Input Validation

*
  • M
Use After Free

*
  • H
Expired Pointer Dereference

*
  • M
Improper Preservation of Permissions

*
  • M
Use After Free

*
  • M
NULL Pointer Dereference

*
  • M
Out-of-bounds Write

*
  • M
Improper Access Control

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
NULL Pointer Dereference

*
  • M
Resource Exhaustion

*
  • L
Improper Handling of Length Parameter Inconsistency

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Improper Input Validation

*
  • H
Out-of-bounds Write

*
  • M
Improper Input Validation

*
  • M
Information Exposure

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • M
Incorrect Synchronization

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • H
Expired Pointer Dereference

*
  • M
Access of Uninitialized Pointer

*
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Out-of-bounds Write

*
  • M
Access of Uninitialized Pointer

*
  • M
Use After Free

*
  • M
Use After Free

*
  • M
Improper Input Validation

*
  • H
Out-of-bounds Write

*
  • M
Expired Pointer Dereference

*
  • H
Expired Pointer Dereference

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Read

*
  • L
Out-of-bounds Write

*
  • M
NULL Pointer Dereference

*
  • H
Time-of-check Time-of-use (TOCTOU)

*
  • M
Use After Free

*
  • M
Protection Mechanism Failure

*
  • M
Use After Free

*
  • M
Integer Overflow or Wraparound

*
  • M
Out-of-bounds Write

*
  • H
Information Exposure

*
  • M
Race Condition

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • M
Incorrect Synchronization

*
  • M
Improper Control of a Resource Through its Lifetime

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Race Condition

*
  • M
Out-of-bounds Write

*
  • M
Use After Free

*
  • L
Missing Initialization of Resource

*
  • M
Use After Free

*
  • L
Incorrect Synchronization

*
  • M
Resource Exhaustion

*
  • M
Use After Free

*
  • M
Integer Underflow

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Use After Free

*
  • M
Resource Exhaustion

*
  • H
Buffer Overflow

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Access of Uninitialized Pointer

*
  • M
Use After Free

*
  • M
Improper Handling of Length Parameter Inconsistency

*
  • M
Expired Pointer Dereference

*
  • M
Use of Blocking Code in Single-threaded, Non-blocking Context

*
  • M
Use After Free

*
  • M
Out-of-bounds Write

*
  • M
NULL Pointer Dereference

*
  • H
Out-of-bounds Write

*
  • M
Out-of-bounds Write

*
  • M
Improper Validation of Specified Index, Position, or Offset in Input

*
  • H
CVE-2026-89161

*
  • M
Improper Input Validation

*
  • L
Out-of-bounds Read

*
  • M
Use After Free

*
  • M
Buffer Overflow

*
  • M
Use After Free

*
  • H
Information Exposure

*
  • H
Authentication Bypass by Primary Weakness

*
  • H
Directory Traversal

*
  • M
Authentication Bypass

*
  • M
Integer Overflow or Wraparound

*
  • M
Stack-based Buffer Overflow

*
  • L
Out-of-bounds Read

*
  • M
Heap-based Buffer Overflow

*
  • M
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Improper Cross-boundary Removal of Sensitive Data

*
  • M
Link Following

*
  • M
Reliance on Cookies without Validation and Integrity Checking

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Information Exposure

*
  • M
Improper Certificate Validation

*
  • H
Buffer Overflow

*
  • M
Comparison Using Wrong Factors

*
  • M
Integer Coercion Error

*
  • M
NULL Pointer Dereference

*
  • L
Incorrect Calculation of Buffer Size

*
  • M
Out-of-bounds Write

*
  • H
Link Following

*
  • H
Out-of-bounds Write

*
  • M
NULL Pointer Dereference

*
  • M
Incorrect Resource Transfer Between Spheres

*
  • M
Information Exposure

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Reachable Assertion

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
Not Failing Securely ('Failing Open')

*
  • H
Improper Certificate Validation

*
  • H
Out-of-bounds Write

*
  • M
Integer Overflow or Wraparound

*
  • M
Out-of-bounds Read

*
  • M
Use After Free

*
  • L
Integer Overflow or Wraparound

*
  • L
Incorrect Permission Assignment for Critical Resource

*
  • M
Uncontrolled Recursion

*
  • M
Improper Access Control

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Incorrect Authorization

*
  • M
Use of Externally-Controlled Format String

*
  • H
Out-of-bounds Write

*
  • M
Expired Pointer Dereference

*
  • M
Buffer Overflow

*
  • H
OS Command Injection

*
  • H
OS Command Injection

*
  • M
Out-of-bounds Read

*
  • M
Use of Insufficiently Random Values

*
  • M
Resource Exhaustion

*
  • L
Use of Uninitialized Resource

*
  • M
Reachable Assertion

*
  • M
Buffer Overflow

*
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

*
  • M
Use After Free

*
  • M
Expired Pointer Dereference

*
  • M
CVE-2026-64535

*
  • H
HTTP Request Smuggling

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • M
Comparison Using Wrong Factors

*
  • M
Missing Initialization of Resource

*
  • M
Improper Restriction of Excessive Authentication Attempts

*
  • M
Improper Restriction of Excessive Authentication Attempts

*
  • H
Expired Pointer Dereference

*
  • H
Improperly Implemented Security Check for Standard

*
  • M
HTTP Request Smuggling

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Read

*
  • L
NULL Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
Directory Traversal

*
  • L
Origin Validation Error

*
  • H
HTTP Request Smuggling

*
  • H
Improper Validation of Specified Type of Input

*
  • M
Out-of-bounds Read

*
  • M
Incorrect Privilege Assignment

*
  • M
Information Exposure

*
  • M
Arbitrary Argument Injection

*
  • M
Divide By Zero

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Incorrect Calculation of Buffer Size

*
  • L
Incorrect Conversion between Numeric Types

*
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • L
NULL Pointer Dereference

*
  • L
Release of Invalid Pointer or Reference

*
  • M
Information Exposure

*
  • M
Improper Null Termination

*
  • M
CVE-2026-6368

*
  • M
Use of Externally-Controlled Format String

*
  • M
Buffer Access with Incorrect Length Value

*
  • M
NULL Pointer Dereference

*
  • M
Directory Traversal

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Out-of-bounds Write

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Incomplete Filtering of Special Elements

*
  • M
Directory Traversal

*
  • M
Double Free

*
  • M
Buffer Overflow

*
  • L
Information Exposure

*
  • H
Link Following

*
  • H
Link Following

*
  • H
Link Following

*
  • M
Integer Overflow or Wraparound

*
  • H
Link Following

*
  • M
Buffer Over-read

*
  • H
OS Command Injection

*
  • M
Incorrect Calculation of Buffer Size

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Exposure of Data Element to Wrong Session

*
  • M
Link Following

*
  • L
Information Exposure

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Out-of-bounds Read

*
  • M
Use After Free

*
  • M
Integer Overflow or Wraparound

*
  • M
Out-of-bounds Write

*
  • H
Expired Pointer Dereference

*
  • H
Out-of-bounds Read

*
  • M
Integer Overflow or Wraparound

*
  • M
Out-of-bounds Read

*
  • M
Out-of-bounds Write

*
  • M
Directory Traversal

*
  • M
Incorrect Calculation of Buffer Size

*
  • M
Directory Traversal

*
  • L
Integer Overflow or Wraparound

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • L
Incorrect Implementation of Authentication Algorithm

*
  • L
Asymmetric Resource Consumption (Amplification)

*
  • M
Integer Overflow or Wraparound

*
  • H
Link Following

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • H
Time-of-check Time-of-use (TOCTOU)

*
  • H
Link Following

*
  • M
Expired Pointer Dereference

*
  • M
Link Following

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Link Following

*
  • L
Use After Free

*
  • M
Insufficient Verification of Data Authenticity

*
  • H
Time-of-check Time-of-use (TOCTOU)

*
  • L
Out-of-bounds Write

*
  • M
Integer Overflow or Wraparound

*
  • M
Improper Input Validation

*
  • L
Use of Less Trusted Source

*
  • M
Improper Update of Reference Count

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Out-of-bounds Write

*
  • M
Heap-based Buffer Overflow

*
  • H
Heap-based Buffer Overflow

*
  • H
Out-of-bounds Read

*
  • M
Integer Overflow or Wraparound

*
  • M
Uncontrolled Recursion

*
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • H
Improper Validation of Integrity Check Value

*
  • H
OS Command Injection

*
  • M
Out-of-bounds Read

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Improper Restriction of Communication Channel to Intended Endpoints

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Read

*
  • M
Cleartext Transmission of Sensitive Information

*
  • M
Improper Validation of Array Index

*
  • M
Information Exposure

*
  • L
Out-of-bounds Read

*
  • H
Link Following

*
  • M
Improper Preservation of Permissions

*
  • L
Improper Verification of Cryptographic Signature

*
  • L
Improperly Implemented Security Check for Standard

*
  • H
Out-of-bounds Read

*
  • M
Acceptance of Extraneous Untrusted Data With Trusted Data

*
  • H
Expired Pointer Dereference

*
  • M
Off-by-one Error

*
  • M
Incorrect Execution-Assigned Permissions

*
  • H
Use of Incorrect Operator

*
  • L
NULL Pointer Dereference

*
  • M
OS Command Injection

*
  • L
NULL Pointer Dereference

*
  • H
Function Call with Incorrectly Specified Arguments

*
  • M
Off-by-one Error

*
  • H
Access of Uninitialized Pointer

*
  • M
Integer Overflow or Wraparound

*
  • H
OS Command Injection

*
  • H
Excessive Platform Resource Consumption within a Loop

*
  • M
NULL Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • L
Improper Validation of Integrity Check Value

*
  • M
Out-of-bounds Write

*
  • M
Acceptance of Extraneous Untrusted Data With Trusted Data

*
  • M
Expired Pointer Dereference

*
  • H
Write-what-where Condition

*
  • M
Improper Validation of Specified Type of Input

*
  • M
Resource Exhaustion

*
  • H
Out-of-bounds Read

*
  • L
Expired Pointer Dereference

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Improper Certificate Validation

*
  • L
Information Exposure

*
  • L
Buffer Access with Incorrect Length Value

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Write-what-where Condition

*
  • C
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
Improper Certificate Validation

*
  • M
Incorrect Bitwise Shift of Integer

*
  • M
Link Following

*
  • L
Inappropriate Encoding for Output Context

*
  • M
Improper Certificate Validation

*
  • L
Out-of-bounds Read

*
  • L
Out-of-bounds Write

*
  • M
Improper Access Control

*
  • H
Predictable from Observable State

*
  • M
Integer Underflow

*
  • M
Link Following

*
  • L
NULL Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
Integer Overflow or Wraparound

*
  • M
Uncontrolled Recursion

*
  • M
Improper Input Validation

*
  • M
Expired Pointer Dereference

*
  • M
Directory Traversal

*
  • M
Authentication Bypass

*
  • M
Improper Validation of Syntactic Correctness of Input

*
  • M
Out-of-bounds Read

*
  • M
Integer Underflow

*
  • M
OS Command Injection

*
  • M
Improper Validation of Integrity Check Value

*
  • M
Reachable Assertion

*
  • H
Improper Null Termination

*
  • H
Improper Update of Reference Count

*
  • M
Execution with Unnecessary Privileges

*
  • M
Information Exposure

*
  • L
Improper Certificate Validation

*
  • M
Expired Pointer Dereference

*
  • M
Expired Pointer Dereference

*
  • M
Improper Validation of Consistency within Input

*
  • M
Authentication Bypass by Primary Weakness

*
  • H
Least Privilege Violation

*
  • L
Out-of-bounds Read

*
  • M
Integer Overflow or Wraparound

*
  • H
Undefined Behavior for Input to API

*
  • M
OS Command Injection

*
  • L
Improper Update of Reference Count

*
  • M
OS Command Injection

*
  • M
Improper Neutralization of Null Byte or NUL Character

*
  • M
Incorrect Calculation of Buffer Size

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Uncontrolled Recursion

*
  • L
Improper Validation of Integrity Check Value

*
  • H
Excessive Platform Resource Consumption within a Loop

*
  • H
Integer Overflow or Wraparound

*
  • M
External Control of File Name or Path

*
  • H
Improper Preservation of Permissions

*
  • L
Improper Verification of Cryptographic Signature

*
  • H
Access of Uninitialized Pointer

*
  • M
Improper Handling of Inconsistent Special Elements

*
  • H
Buffer Access with Incorrect Length Value

*
  • L
OS Command Injection

*
  • M
Buffer Overflow

*
  • H
OS Command Injection

*
  • M
Out-of-bounds Read

*
  • H
Improper Handling of Length Parameter Inconsistency

*
  • H
OS Command Injection

*
  • M
Buffer Underflow

*
  • M
Out-of-bounds Read

*
  • M
OS Command Injection

*
  • M
Reachable Assertion

*
  • M
Expired Pointer Dereference

*
  • H
Out-of-bounds Read

*
  • L
Incorrect Calculation of Multi-Byte String Length

*
  • L
Integer Overflow or Wraparound

*
  • H
Reachable Assertion

*
  • M
Improper Validation of Consistency within Input

*
  • M
Improper Handling of Insufficient Permissions or Privileges

*
  • M
Integer Underflow

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Improper Handling of Case Sensitivity

*
  • M
Memory Leak

*
  • M
Uncontrolled Recursion

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Buffer Overflow

*
  • M
Out-of-bounds Read

*
  • H
Integer Underflow

*
  • M
Buffer Access with Incorrect Length Value

*
  • L
NULL Pointer Dereference

*
  • M
Incorrect Calculation of Buffer Size

*
  • M
Out-of-bounds Read

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Buffer Overflow

*
  • M
Out-of-bounds Read

*
  • L
Integer Underflow

*
  • M
Out-of-bounds Read

*
  • M
Improper Handling of Case Sensitivity

*
  • L
Misinterpretation of Input

*
  • L
Incorrect Behavior Order: Early Validation

*
  • M
Improper Privilege Management

*
  • M
Memory Leak

*
  • L
Missing Authentication for Critical Function

*
  • H
Link Following

*
  • H
Time-of-check Time-of-use (TOCTOU)

*
  • L
Out-of-bounds Write

*
  • H
Improper Validation of Consistency within Input

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Out-of-bounds Read

*
  • M
Link Following

*
  • M
Incorrect Implementation of Authentication Algorithm

*
  • M
Directory Traversal

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • L
Improper Null Termination

*
  • L
Improper Handling of Missing Special Element

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • M
Use After Free

*
  • M
Permissive Regular Expression

*
  • L
CVE-2026-28387

*
  • H
CRLF Injection

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • L
Out-of-bounds Read

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • M
Stack-based Buffer Overflow

*
  • M
Reachable Assertion

*
  • M
Buffer Overflow

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • H
Insufficient Verification of Data Authenticity

*
  • H
Insufficient Verification of Data Authenticity

*
  • M
Expired Pointer Dereference

*
  • L
Use of Uninitialized Resource

*
  • L
Resource Exhaustion

*
  • H
Improper Access Control

*
  • M
Double Free

*
  • L
Expired Pointer Dereference

*
  • L
Integer Overflow or Wraparound

*
  • M
Out-of-bounds Read

*
  • H
Insufficient Verification of Data Authenticity

*
  • H
Reachable Assertion

*
  • L
Reachable Assertion

*
  • H
Symlink Following

*
  • L
Improper Validation of Specified Type of Input

*
  • L
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
Out-of-bounds Read

*
  • L
External Control of File Name or Path

*
  • M
Use After Free

*
  • L
Stack-based Buffer Overflow

*
  • L
Out-of-bounds Read

*
  • L
Integer Overflow or Wraparound

*
  • L
Incorrect Calculation of Buffer Size

*
  • M
Buffer Underflow

*
  • M
Uncontrolled Recursion

*
  • M
Information Exposure

*
  • M
Heap-based Buffer Overflow

*
  • L
NULL Pointer Dereference

*
  • L
Use of Uninitialized Resource

*
  • L
External Control of System or Configuration Setting

*
  • H
Execution with Unnecessary Privileges

*
  • H
OS Command Injection

*
  • M
Reachable Assertion

*
  • L
Unchecked Input for Loop Condition

*
  • M
Improper Validation of Specified Type of Input

*
  • M
Out-of-bounds Write

*
  • M
Directory Traversal

*
  • L
Uncontrolled Recursion

*
  • M
Buffer Overflow

*
  • H
Insecure Default Initialization of Resource

*
  • H
Resource Exhaustion

*
  • L
Inefficient Regular Expression Complexity

*
  • M
Insufficient Verification of Data Authenticity

*
  • M
Directory Traversal

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Stack-based Buffer Overflow

*
  • L
Memory Leak

*
  • M
Out-of-bounds Write

*
  • L
Integer Overflow or Wraparound

*
  • M
Uncontrolled Recursion

*
  • M
Use of Uninitialized Resource

*
  • H
Integer Underflow

*
  • L
Out-of-bounds Write

*
  • L
Unchecked Input for Loop Condition

*
  • M
Release of Invalid Pointer or Reference

*
  • H
Acceptance of Extraneous Untrusted Data With Trusted Data

*
  • H
Out-of-bounds Read

*
  • H
Out-of-bounds Write

*
  • M
Out-of-bounds Write

*
  • H
Out-of-bounds Read

*
  • M
Reachable Assertion

*
  • M
Improper Certificate Validation

*
  • L
NULL Pointer Dereference

*
  • L
Improper Validation of Specified Index, Position, or Offset in Input

*
  • M
Incorrect Calculation of Buffer Size

*
  • L
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
NULL Pointer Dereference

*
  • H
Numeric Truncation Error

*
  • M
Integer Overflow or Wraparound

*
  • M
Double Free

*
  • M
Buffer Overflow

*
  • L
Out-of-bounds Read

*
  • M
Unchecked Input for Loop Condition

*
  • H
Use After Free

*
  • M
Improper Certificate Validation

*
  • H
Resource Exhaustion

*
  • H
CRLF Injection

*
  • M
Out-of-Bounds

*
  • M
Out-of-bounds Read

*
  • L
Stack-based Buffer Overflow

*
  • M
Improper Check for Unusual or Exceptional Conditions

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Out-of-bounds Write

*
  • M
Improper Neutralization of Null Byte or NUL Character

*
  • M
Out-of-bounds Read

*
  • M
Directory Traversal

*
  • M
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • M
Double Free

*
  • M
Directory Traversal

*
  • M
Processor Optimization Removal or Modification of Security-critical Code

*
  • M
NULL Pointer Dereference

*
  • M
Out-of-Bounds

*
  • H
Out-of-bounds Read

*
  • M
Buffer Overflow

*
  • L
Out-of-bounds Write

*
  • H
Improper Verification of Cryptographic Signature

*
  • M
OS Command Injection

*
  • L
Out-of-bounds Read

*
  • M
Use After Free

*
  • M
Insufficient Granularity of Access Control

*
  • L
Access of Uninitialized Pointer

*
  • M
Integer Underflow

*
  • L
Stack-based Buffer Overflow

*
  • L
Missing Required Cryptographic Step

*
  • H
Expired Pointer Dereference

*
  • M
Use After Free

*
  • L
Algorithmic Complexity

*
  • M
Improper Use of Validation Framework

*
  • M
Failure to Sanitize Special Element

*
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • H
Out-of-bounds Read

*
  • M
Unrestricted Externally Accessible Lock

*
  • M
Reachable Assertion

*
  • M
Buffer Overflow

*
  • M
Expired Pointer Dereference

*
  • M
Reachable Assertion

*
  • L
NULL Pointer Dereference

*
  • M
Directory Traversal

*
  • L
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • H
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

*
  • M
Incorrect Calculation of Buffer Size

*
  • L
Out-of-bounds Read

*
  • M
Integer Overflow or Wraparound

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • L
Improper Validation of Specified Quantity in Input

*
  • M
Algorithmic Complexity

*
  • L
Improper Certificate Validation

*
  • M
NULL Pointer Dereference

*
  • M
Return of Wrong Status Code

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • M
Expired Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
Integer Overflow or Wraparound

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • H
Improper Authentication

*
  • L
Heap-based Buffer Overflow

*
  • M
Allocation of Resources Without Limits or Throttling

*
  • L
Unchecked Return Value

*
  • L
Out-of-bounds Read

*
  • L
Use After Free

*
  • L
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
Stack-based Buffer Overflow

*
  • M
Out-of-bounds Read

*
  • L
Out-of-bounds Read

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • M
Out-of-bounds Write

*
  • H
Directory Traversal

*
  • M
NULL Pointer Dereference

*
  • H
Resource Exhaustion

*
  • H
Buffer Overflow

*
  • M
Reversible One-Way Hash

*
  • M
Heap-based Buffer Overflow

*
  • L
NULL Pointer Dereference

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • M
Incorrect Privilege Assignment

*
  • M
Arbitrary Argument Injection

*
  • M
Out-of-bounds Read

*
  • M
Buffer Over-read

*
  • M
Untrusted Search Path

*
  • H
Stack-based Buffer Overflow

*
  • M
Out-of-bounds Write

*
  • L
Buffer Access with Incorrect Length Value

*
  • M
Return of Wrong Status Code

*
  • M
Missing Authentication for Critical Function

*
  • M
Uncontrolled Search Path Element

*
  • H
Improper Input Validation

*
  • M
Use After Free

*
  • L
Improper Check for Unusual or Exceptional Conditions

*
  • M
Expected Behavior Violation

*
  • M
Directory Traversal

*
  • H
Out-of-bounds Write

*
  • M
Incorrect Calculation

*
  • L
Use of Uninitialized Resource

*
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • M
Directory Traversal

*
  • L
Information Exposure

*
  • M
Integer Overflow or Wraparound

*
  • L
NULL Pointer Dereference

*
  • H
Out-of-bounds Read

*
  • M
Improper Certificate Validation

*
  • L
Buffer Overflow

*
  • L
Arbitrary Argument Injection

*
  • L
Authentication Bypass by Primary Weakness

*
  • L
Improperly Implemented Security Check for Standard

*
  • M
Improper Synchronization

*
  • L
Out-of-bounds Read

*
  • L
Out-of-bounds Write

*
  • M
Out-of-bounds Write

*
  • H
Race Condition

*
  • M
Information Exposure

*
  • H
Incorrect Authorization

*
  • M
Out-of-bounds Read

*
  • M
Expired Pointer Dereference

*
  • M
Out-of-bounds Read

*
  • H
Use After Free

*
  • M
Incorrect Execution-Assigned Permissions

*
  • M
Use of Out-of-range Pointer Offset

*
  • H
Symlink Following

*
  • H
Incorrect Privilege Assignment

*
  • H
Expired Pointer Dereference

*
  • M
Stack-based Buffer Overflow

*
  • M
Information Exposure

*
  • M
Use of Uninitialized Resource

*
  • H
Resource Exhaustion

*
  • L
Out-of-bounds Read

*
  • L
Out-of-bounds Write

*
  • L
Out-of-Bounds

*
  • L
Missing Release of Resource after Effective Lifetime

*
  • H
Out-of-bounds Write

*
  • H
NULL Pointer Dereference

*
  • L
NULL Pointer Dereference

*
  • M
Improper Handling of Parameters

*
  • H
Resource Exhaustion

*
  • H
Improper Validation of Syntactic Correctness of Input

*
  • L
NULL Pointer Dereference

*
  • M
Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element

*
  • H
Reachable Assertion

*
  • L
NULL Pointer Dereference

*
  • H
Buffer Overflow

*
  • H
Out-of-bounds Write

*
  • M
Out-of-bounds Write

*
  • M
Out-of-bounds Read

*
  • M
Improper Validation of Specified Quantity in Input

*
  • H
Improper Privilege Management

*
  • L
Out-of-bounds Read

*
  • M
Acceptance of Extraneous Untrusted Data With Trusted Data

*
  • H
Resource Exhaustion

*
  • M
Insufficiently Protected Credentials

*
  • M
Use After Free

*
  • M
CVE-2024-26602

*
  • M
Integer Overflow or Wraparound

*
  • H
Improper Authentication

*
  • H
Use of Uninitialized Resource

*
  • M
Buffer Overflow

*
  • M
Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • H
Out-of-bounds Read

*
  • H
Integer Overflow or Wraparound

*
  • H
Out-of-bounds Write

*
  • H
Out-of-bounds Write

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • M
Expired Pointer Dereference

*
  • M
NULL Pointer Dereference

*
  • M
HTTP Request Smuggling

*
  • M
NULL Pointer Dereference

*
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

*