Skip to content
OpenAdvisories

Weakness (CWE)

CWE-192: Integer Coercion Error

Variant Incomplete

Integer coercion refers to a set of flaws pertaining to the type casting, extension, or truncation of primitive data types.

How to prevent it (3 mitigations)
  1. Requirements

    A language which throws exceptions on ambiguous data casts might be chosen.

  2. Architecture and Design

    Design objects and program flow such that multiple or complex casts are unnecessary

  3. Implementation

    Ensure that any data type casting that you must use is entirely understood in order to reduce the plausibility of error in use.

Source: MITRE CWE-192

2 results · Clear filters · Feed

  • Low 3.7

    bettercap MySQL Server mysql_server.go integer coercion

    A flaw has been found in bettercap up to 2.41.5. Affected by this issue is some unknown functionality of the file modules/mysql_server/mysql_server.go of the component MySQL Server. Executing a manipulation can lead to integer coercion error. The attack can b…

  • Low 3.7

    bettercap zerogod IPP Service zerogod_ipp_primitives.go ippReadChunkedBody integer coercion

    A vulnerability was detected in bettercap up to 2.41.5. Affected by this vulnerability is the function ippReadChunkedBody of the file modules/zerogod/zerogod_ipp_primitives.go of the component zerogod IPP Service. Performing a manipulation results in integer …