Skip to content
OpenAdvisories

Weakness (CWE)

CWE-188: Reliance on Data/Memory Layout

Base Draft

The product makes invalid assumptions about how protocol data or memory is organized at a lower level.

How to prevent it (3 mitigations)

  1. Implementation, Architecture and Design

    In flat address space situations, never allow computing memory addresses as offsets from another memory address.

  2. Architecture and Design

    Fully specify protocol layout unambiguously, providing a structured grammar (e.g., a compilable yacc grammar).

  3. Testing

    Testing: Test that the implementation properly handles each case in the protocol grammar.

Source: MITRE CWE-188

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.