Integer Overflow

Arithmetic that silently wraps past its maximum, turning size checks into lies.

Core Principles & Analysis

• A length that wraps to a tiny number passes the bounds check, then under-allocates the buffer.
• Ariane 5’s maiden flight was destroyed in 1996 after a 64-to-16-bit conversion overflowed.
• Compilers treating signed overflow as undefined can silently delete the very checks meant to catch it.

Specifications & Metrics

• CWE: CWE-190
• IMPACT: Memory corruption, logic bypass