logo
Home/CWEs/CWE-466/

CWE-466 - Return of Pointer Value Outside of Expected Range

  • Abstraction:Base
  • Structure:Simple
  • Status:Draft
  • Release Date:2006-07-19
  • Latest Modification Date:2023-06-29

Weakness Name

Return of Pointer Value Outside of Expected Range

Description

A function can return a pointer to memory that is outside of the buffer that the pointer is expected to reference.

Common Consequences

Scope: Confidentiality, Integrity

Impact: Read Memory, Modify Memory

Related Weaknesses

CWE-20Improper Input ValidationHigh

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferHigh