Weakness
Buffer Access with Incorrect Length Value
CWE-805 · Base · Incomplete
The product uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer.
Extended description
When the length value exceeds the size of the destination, a buffer overflow could occur.
△
Weakness Relationships
Where this weakness sits in the CWE hierarchy. Walk up to broader classes or down to more specific variants.
Parent of this (broader)
Children (more specific)
◆
Attack Patterns (CAPEC)
2How adversaries exploit this weakness, per MITRE CAPEC.
CAPEC-100Overflow Buffers
CAPEC-256SOAP Array Overflow
⚠
CVEs With This Weakness
55A sample of the 55 CVEs tagged with this weakness.
View all 55 CVEs with this weakness
External lookups - second-class, for what we don’t hold ourselves