Integer Overflow to Buffer Overflow

Opis

The product performs a calculation to determine how much memory to allocate, but an integer overflow can occur that causes less memory to be allocated than expected, leading to a buffer overflow.

Skutki

• Integrity, Availability, Confidentiality

  Modify Memory; DoS: Crash, Exit, or Restart; Execute Unauthorized Code or Commands

Przykłady podatności

• CVE-2021-43537 Chain: in a web browser, an unsigned 64-bit integer is forcibly cast to a 32-bit integer (CWE-681) and potentially leading to an integer overflow (CWE-190). If an integer overflow occurs, this can cause heap memory corruption (CWE-122)
• CVE-2017-1000121 chain: unchecked message size metadata allows integer overflow (CWE-190) leading to buffer overflow (CWE-119).

Zaczyna się od

• CWE-190 Integer Overflow or Wraparound

Słabość nadrzędna

• CWE-190 Integer Overflow or Wraparound

Kiedy powstaje

• Implementation

Dotyczy

Memory-Unsafe, C, C++

Źródła

1. AddressSanitizer