What MITRE says

The description above is MITRE’s definition of CWE-190 in CWE 4.20, a base-level weakness.

Common consequences MITRE lists

  • Availability: DoS: Crash, Exit, or Restart; DoS: Resource Consumption (Memory); DoS: Instability
  • Integrity: Modify Memory
  • Confidentiality, Availability, Access Control: Execute Unauthorized Code or Commands; Bypass Protection Mechanism
  • Availability, Other: Alter Execution Logic; DoS: Crash, Exit, or Restart; DoS: Resource Consumption (CPU)
  • Access Control: Bypass Protection Mechanism

Guides on this site

Cites this weakness · Guide

Find, fix and contain memory-safety bugs in C and C++

Recognize out-of-bounds access, use after free, NULL dereference and integer overflow in C and C++, fix them with checked lengths and single ownership, harden release builds, catch the rest with sanitizers and fuzzing, and plan new code in a memory-safe language.

Cites this weakness · Guide

Audit unsafe Rust, FFI boundaries and crate dependencies

Know what the Rust compiler proves and what it leaves to you: review unsafe code for soundness, wrap foreign calls in small safe functions, decide how overflow and panics behave in release builds, gate crates with RustSec, and replace C one boundary at a time.

Practice

References

  1. CWE-190 in the MITRE CWE list (version 4.20)

This page is generated from MITRE’s CWE 4.20 catalogue (released 30 April 2026) and lists every guide, fix card and lab here that cites CWE-190.

CWE content: Copyright © 2006–2026, The MITRE Corporation. CWE, CWSS, CWRAF, and the CWE logo are trademarks of The MITRE Corporation. CWE™ is free to use by any organization or individual for any research, development, and/or commercial purposes, per these CWE Terms of Use. Accordingly, The MITRE Corporation hereby grants you a non-exclusive, royalty-free license to use CWE for research, development, and commercial purposes. Any copy you make for such purposes is authorized on the condition that you reproduce MITRE’s copyright designation and this license in any such copy. CWE is a trademark of The MITRE Corporation. CWE Terms of Use.