Incorrect Pointer Scaling
CWE-468
In C and C++, one may often accidentally refer to the wrong memory due to the semantics of when math operations are implicitly scaled.
We track 3 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.9.
How this weakness is prevented
- Architecture and Design: Use a platform with high-level memory abstractions.
- Implementation: Always use array indexing instead of direct pointer manipulation.
- Architecture and Design: Use technologies for preventing buffer overflows.
Latest Incorrect Pointer Scaling vulnerabilities
- 7.1 High severity
Graphics DDK: Incorrect Pointer Scaling
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of a mapping state maintained for a sparse memory allocation. The product accidentally refers to the wrong memory due to the semantics of how math
- 9.8 Critical severity
MELSEC-Q Series Q03UDECPU: Incorrect Pointer Scaling
Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.
- 9.8 Critical severity
MELSEC-Q Series Q03UDECPU: Incorrect Pointer Scaling
Incorrect Pointer Scaling vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to read arbitrary information from a target product or execute malicious code on a target produc