CWE Database
/

CWE-587

Back to CWE list

CWE-587

Assignment of a Fixed Address to a Pointer

Variant
Draft

Description

The product sets a pointer to a specific address other than NULL or 0.

Using a fixed address is not portable, because that address will probably not be valid in all environments or platforms.

Common Consequences

Scope

Integrity
Confidentiality
Availability

Impact

Execute Unauthorized Code or Commands

Scope

Availability

Impact

DoS: Crash, Exit, or Restart, Reduce Maintainability, Reduce Reliability

Scope

Confidentiality
Integrity

Impact

Read Memory, Modify Memory

Potential Mitigations

Implementation

Never set a pointer to a fixed address.

Applicable Platforms

Memory-Unsafe
C
C++
C#
Assembly

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now