Description

The software does not restrict or incorrectly restricts operations within the boundaries of a resource that is accessed using an index or pointer, such as memory or files.

Applicable Platforms
Language Class: All

Time Of Introduction

• Architecture and Design
• Implementation
• Operation

Related Attack Patterns

• CAPEC-10
• CAPEC-14
• CAPEC-24
• CAPEC-45
• CAPEC-46
• CAPEC-47
• CAPEC-8
• CAPEC-9

Common Consequences

Detection Methods
None

Potential Mitigations
None

Relationships

Demonstrative Examples
None

White Box Definitions
None

Black Box Definitions
None

Taxynomy Mappings
None

References:
None