The product does not use, or incorrectly uses, an input validation framework that is provided by the source language or an independent library.
1
cwe_id
124
name
Buffer Underwrite ('Buffer Underflow')
description
The product writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.
2
cwe_id
129
name
Improper Validation of Array Index
description
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.