CWE-196: Unsigned to Signed Conversion Error

ID CWE-196

Abstraction Variant

Structure Simple

Status Draft

Number of CVEs 4

The product uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value if the value of the unsigned primitive can not be represented using a signed primitive.

Although less frequent an issue than signed-to-unsigned conversion, unsigned-to-signed conversion can be the perfect precursor to dangerous buffer underwrite conditions that allow attackers to move down the stack where they otherwise might not have access in a normal buffer overflow condition. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.

Modes of Introduction

Phase	Note
Implementation

Applicable Platforms

Type	Class	Name	Prevalence
Language		C
Language		C++

Relationships

View			Weakness
# ID	View	Status	# ID	Name	Abstraction	Structure	Status
CWE-1000	Research Concepts	Draft	CWE-681	Incorrect Conversion between Numeric Types	Base	Simple	Draft
CWE-1305	CISQ Quality Measures (2020)	Incomplete	CWE-681	Incorrect Conversion between Numeric Types	Base	Simple	Draft
CWE-1340	CISQ Data Protection Measures	Incomplete	CWE-681	Incorrect Conversion between Numeric Types	Base	Simple	Draft
CWE-1000	Research Concepts	Draft	CWE-124	Buffer Underwrite ('Buffer Underflow')	Base	Simple	Incomplete
CWE-1000	Research Concepts	Draft	CWE-120	Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')	Base	Simple	Incomplete

Common Attack Pattern Enumeration and Classification (CAPEC)

The Common Attack Pattern Enumeration and Classification (CAPEC™) effort provides a publicly available catalog of common attack patterns that helps users understand how adversaries exploit weaknesses in applications and other cyber-enabled capabilities.

CAPEC at Mitre.org

# ID	Name	Weaknesses
CAPEC-92	Forced Integer Overflow	CWE-196

CVEs Published

Based on CVE published date

CVSS Severity

CVSS Severity - By Year

CVSS Base Score

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date