VariantDraft
CWE-587Assignment of a Fixed Address to a Pointer
Category: memory
Description
The product sets a pointer to a specific address other than NULL or 0.
Using a fixed address is not portable, because that address will probably not be valid in all environments or platforms.
Common consequences· 3
- Integrity / Confidentiality / Availability — Execute Unauthorized Code or CommandsIf one executes code at a known location, an attacker might be able to inject code there beforehand.
- Availability — DoS: Crash, Exit, or Restart, Reduce Maintainability, Reduce ReliabilityIf the code is ported to another platform or environment, the pointer is likely to be invalid and cause a crash.
- Confidentiality / Integrity — Read Memory, Modify MemoryThe data at a known pointer location can be easily read or influenced by an attacker.
Potential mitigations· 1
- [Implementation]Never set a pointer to a fixed address.
References
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.