C/C++ Gen 2

.c

.h

.cc

.hh

.cpp

.hxx

.cxx

.hpp

LLVM / MinGW / C++ toolchain

C standard library (glibc / musl)

GLib / GObject / GNOME

Apache Portable Runtime (APR)

Asynchronous I/O / Event Loop (libuv / libevent)

SQLite

ODBC / unixODBC

MySQL

PostgreSQL

MongoDB

BSON

Talloc

cURL / libcurl

OpenSSL / TLS / Cryptography

Redis

Memory Allocation (mimalloc)

JSON (jansson)

Protocol Buffers (protobuf-c)

MessagePack (msgpack-c)

Linux System APIs

Compression / Archiving (zlib / libarchive)

C++ Formatting & Logging (fmtlib / spdlog)

Boost C++ Libraries

Qt Framework

Scripting / Embedding (Lua / CPython / Duktape)

XML Processing (libxml2 / Xerces)

Cassandra

OpenLDAP

SSH / Secure Shell (libssh / libssh2)

RabbitMQ / AMQP

AWS SDK for C / C++

Azure SDK (C / C++)

MQTT (Paho)

HTTP / Web (httplib)

CWE

Vulnerability Type

Low Probability Impact

CWE-22

Path/Directory Traversal

• Additional Taint Sources:
  Content from files and streams, databases, environment (command line calls, main method arguments, environment variables, configurations, url access)

CWE-78

Command Injection

• Additional Taint Sources:
  Content from files and streams, databases, environment (command line calls, main method arguments, environment variables, configurations, url access)

CWE-89

SQL Injection

• Additional Taint Sources:
  Content from files and streams, databases, environment (command line calls, main method arguments, environment variables, configurations, url access)

CWE-94

Code Injection

• Additional Taint Sources:
  Content from files and streams, databases, environment (command line calls, main method arguments, environment variables, configurations, url access)

CWE-121

Buffer Overflow

• Additional Taint Sources:
  Content from files and streams, databases, environment (command line calls, main method arguments, environment variables, configurations, url access)

• Skipped Taint Sanitizers:
  No heuristical sanitizier for comparisons (<,>,<=..)

• Additional Taint Sinks:
  Buffer lengths in the method lead to an overflow (neither's lengths are user controlled, no data flow, no trace)
  Allocating buffer with negtive size
  Reading from a socket to an insufficient length buffer

CWE-134

Uncontrolled Format String

• Additional Taint Sources:
  Content from files and streams, databases, environment (command line calls, main method arguments, environment variables, configurations, url access)

CWE-190

Integer Overflow

• Additional Taint Sources:
  Content from files and streams, databases, environment (command line calls, main method arguments, environment variables, configurations, url access)

• Skipped Taint Sanitizers:
  No heuristical sanitizier for comparisons (<,>,<=..)

CWE-415

Double Free

• Additional Taint Sources:
  Source is not user controlled

CWE-416

Use After Free

• Additional Taint Sources:
  Source is not user controlled

CWE-787

Out of Buffer Bounds Write

• Additional Taint Sources:
  Content from files and streams, databases, environment (command line calls, main method arguments, environment variables, configurations, url access)

• Skipped Taint Sanitizers:
  Using resolved numbers

• Additional Taint Sinks:
  Mismatched with resolved buffer sizes and indexes

CWE-824

Access of Uninitialized Pointer

• ONLY detected when Low Probability Findings are enabled

CWE-918

Server Side Request Forgery (SSRF)

• Additional Taint Sources:
  Content from files and streams, databases, environment (command line calls, main method arguments, environment variables, configurations, url access)

CWE-943

No-SQL Injection

• Additional Taint Sources:
  Content from files and streams, databases, environment (command line calls, main method arguments, environment variables, configurations, url access)

CWE-125

Out of Buffer Bounds Read

• Additional Taint Sources:
  Content from files and streams, databases, environment (command line calls, main method arguments, environment variables, configurations, url access)

CWE-191

Integer Underflow

• Additional Taint Sources:
  Content from files and streams, databases, environment (command line calls, main method arguments, environment variables, configurations, url access)

• Skipped Taint Sanitizers:
  No heuristical sanitizier for comparisons (<,>,<=..)

CWE-457

Use of Uninitialized Variable

• ONLY detected when Low Probability Findings are enabled

CWE-606

Unchecked Input for Loop Condition

• UNAFFECTED

CWE-611

XML External Entity (XXE) Injection

• Additional Taint Sources:
  Content from files and streams, databases, environment (command line calls, main method arguments, environment variables, configurations, url access)

CWE-676

Miscellaneous Dangerous Functions

• ONLY detected when Low Probability Findings are enabled

CWE-798

Hardcoded Password/Credentials

• Additional Taint Sinks:
  Assignments of hard-coded strings to variables/attributes with special names like password

CWE-242

Use of Inherently Dangerous Function

• Additional Taint Sources:
  Content from files and streams, databases, environment (command line calls, main method arguments, environment variables, configurations, url access)

CWE-369

Divide By Zero

• Additional Taint Sources:
  Content from files and streams, databases, environment (command line calls, main method arguments, environment variables, configurations, url access)

• Skipped Taint Sanitizers:
  No sanitizer for division by zero

• Additional Taint Sinks:
  Denominator is resolved to numberical value zero

CWE-476

NULL Pointer Dereference

• UNAFFECTED

CWE-789

Uncontrolled Memory Allocation

• UNAFFECTED