CWE-587: Assignment of a Fixed Address to a Pointer

Integrity: Execute Unauthorized Code or Commands
Availability: DoS: Crash, Exit, or Restart
Confidentiality: Read Memory

Description

The product sets a pointer to a specific address other than NULL or 0.

Implementation

Never set a pointer to a fixed address.

Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without havin...
Automated Dynamic Analysis: Use tools that are integrated during compilation to insert runtime error-checking mechanisms related to memory safety errors, such as AddressSanitizer (ASan) for C/C++ [REF-1518]....