All posts by rocco

CWE-118 – Incorrect Access of Indexable Resource (‘Range Error’)

Read Time:15 Second

Description

The software does not restrict or incorrectly restricts operations within the boundaries of a resource that is accessed using an index or pointer, such as memory or files.

Modes of Introduction:

– Architecture and Design

 

 

Related Weaknesses

CWE-664

 

Consequences

Other: Varies by Context

 

Potential Mitigations

CVE References

CWE-1102 – Reliance on Machine-Dependent Data Representation

Read Time:15 Second

Description

The code uses a data representation that relies on low-level
data representation or constructs that may vary across different processors,
physical machines, OSes, or other physical components.

Modes of Introduction:

 

 

Related Weaknesses

CWE-758
CWE-1105

 

Consequences

Other: Reduce Maintainability

 

Potential Mitigations

CVE References

CWE-1105 – Insufficient Encapsulation of Machine-Dependent Functionality

Read Time:14 Second

Description

The product or code uses machine-dependent functionality, but
it does not sufficiently encapsulate or isolate this functionality from
the rest of the code.

Modes of Introduction:

 

 

Related Weaknesses

CWE-758
CWE-1061

 

Consequences

Other: Reduce Maintainability

 

Potential Mitigations

CVE References

CWE-1108 – Excessive Reliance on Global Variables

Read Time:16 Second

Description

The code is structured in a way that relies too much on using
or setting global variables throughout various points in the code, instead of
preserving the associated information in a narrower, more local
context.

Modes of Introduction:

 

 

Related Weaknesses

CWE-1076

 

Consequences

Other: Reduce Maintainability

 

Potential Mitigations

CVE References