CWE - CWE-876: CERT C++ Secure Coding Section 08

Category ID: 876

Status: Incomplete

Summary

Weaknesses in this category are related to rules in the Memory Management (MEM) section of the CERT C++ Secure Coding Standard. Since not all rules map to specific weaknesses, this category may be incomplete.

Membership

Nature	Type	ID	Name
MemberOf	View	868	Weaknesses Addressed by the CERT C++ Secure Coding Standard
HasMember	Class	20	Improper Input Validation
HasMember	Class	119	Improper Restriction of Operations within the Bounds of a Memory Buffer
HasMember	Base	128	Wrap-around Error
HasMember	Base	131	Incorrect Calculation of Buffer Size
HasMember	Base	190	Integer Overflow or Wraparound
HasMember	Base	226	Sensitive Information Uncleared Before Release
HasMember	Variant	244	Improper Clearing of Heap Memory Before Release ('Heap Inspection')
HasMember	Base	252	Unchecked Return Value
HasMember	Base	391	Unchecked Error Condition
HasMember	Base	404	Improper Resource Shutdown or Release
HasMember	Variant	415	Double Free
HasMember	Base	416	Use After Free
HasMember	Base	476	NULL Pointer Dereference
HasMember	Variant	528	Exposure of Core Dump File to an Unauthorized Control Sphere
HasMember	Variant	590	Free of Memory not on the Heap
HasMember	Variant	591	Sensitive Data Storage in Improperly Locked Memory
HasMember	Class	665	Improper Initialization
HasMember	Variant	687	Function Call With Incorrectly Specified Argument Value
HasMember	Chain	690	Unchecked Return Value to NULL Pointer Dereference
HasMember	Class	703	Improper Check or Handling of Exceptional Conditions
HasMember	Class	754	Improper Check for Unusual or Exceptional Conditions
HasMember	Variant	762	Mismatched Memory Management Routines
HasMember	Base	770	Allocation of Resources Without Limits or Throttling
HasMember	Base	822	Untrusted Pointer Dereference

References

[REF-855] CERT. "08. Memory Management (MEM)". <https://www.securecoding.cert.org/confluence/display/cplusplus/08.+Memory+Management+%28MEM%29>.

Content History

Submissions
Submission Date	Submitter	Organization
2011-08-04	CWE Content Team	MITRE
2011-08-04

Common Weakness Enumeration

CWE CATEGORY: CERT C++ Secure Coding Section 08 - Memory Management (MEM)


	Use of the Common Weakness Enumeration and the associated references from this website are subject to the Terms of Use. For more information, please email [email protected]. CWE is sponsored by US-CERT in the office of Cybersecurity and Communications at the U.S. Department of Homeland Security. Copyright © 2006-2018, The MITRE Corporation. CWE, CWSS, CWRAF, and the CWE logo are trademarks of The MITRE Corporation.	Privacy policy Terms of use Contact us