Skip to content
OpenAdvisories

Weakness (CWE)

CWE-591: Sensitive Data Storage in Improperly Locked Memory

Variant Draft

The product stores sensitive data in memory that is not locked, or that has been incorrectly locked.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Identify data that needs to be protected from swapping and choose platform-appropriate protection mechanisms.

  2. Implementation

    When using potentially risky functions such as mlock() or VirtualLock(), check return values to ensure that locking operations are successful.

Source: MITRE CWE-591

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed