DerScanner
Home / Vulnerability Database / C or C++ : Vla taint
C/C++

C or C++ : Vla taint

Overview

Use of variable-length array with unchecked tainted size from untrusted sources. This may cause errors.

References

  1. Ensure size arguments for variable length arrays are in a valid range
MEDIUM

DerScanner Severity Score

Do you want to fix C or C++ : Vla taint in your application?

See also

C/C++

C or C++ : Dead store

C/C++

C or C++ : Use after free

C/C++

C or C++ : va_list uninitialized