This category identifies Software Fault Patterns (SFPs) within the Faulty Buffer Access cluster (SFP8).
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | V | 888 | Software Fault Pattern (SFP) Clusters |
| HasMember | Discouraged | C | 118 | Incorrect Access of Indexable Resource ('Range Error') |
| HasMember | Discouraged | C | 119 | Improper Restriction of Operations within the Bounds of a Memory Buffer |
| HasMember | Allowed-with-Review | B | 120 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') |
| HasMember | Allowed | V | 121 | Stack-based Buffer Overflow |
| HasMember | Allowed | V | 122 | Heap-based Buffer Overflow |
| HasMember | Allowed | B | 123 | Write-what-where Condition |
| HasMember | Allowed | B | 124 | Buffer Underwrite ('Buffer Underflow') |
| HasMember | Allowed | B | 125 | Out-of-bounds Read |
| HasMember | Allowed | V | 126 | Buffer Over-read |
| HasMember | Allowed | V | 127 | Buffer Under-read |
| HasMember | Allowed | V | 129 | Improper Validation of Array Index |
This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
See member weaknesses of this category.
| Taxonomy Name | Entry ID | Fit | Entry Name |
|---|