Categories

The software uses a signed primitive and performs a cast to an unsigned primitive, which can produce an unexpected value if the value of the signed primitive can not be represented using an unsigned primitive.

The software misinterprets an input, whether from an attacker or another product, in a security-relevant fashion.

The software has a loop body or loop condition that contains a control element that directly or indirectly consumes platform resources, e.g. messaging, sessions, locks, or file descriptors.

The application calls free() on a pointer to memory that was not allocated using associated heap allocation functions such as malloc(), calloc(), or realloc().

A product inherits a set of insecure permissions for an object, e.g. when copying from an archive file, without user awareness or involvement.