CWE-467: Use of sizeof() on a Pointer Type
Filter
The code calls sizeof() on a pointer type, when the programmer intended to determine the size of the data that is being pointed to.
What the weakness is: CWE-467 at MITRE. All weaknesses
Ask an AI about CWE-467
Show the prompt
Explain CWE-467: Use of sizeof() on a Pointer Type and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/467.html and https://cve.bz/cve/cwe/467?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 5.3CVE-2026-52761EPSS 0.4%
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. From 3.0.0 through 3.0.15, the t:utf8toUnicode transformation in src/actions/transformations/utf8_to_unicode.cc produces wrong o…
- 6.5CVE-2025-33132EPSS 0.3%
IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of the size of the data that is being point…
- 8.4CVE-2021-47456EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: can: peak_pci: peak_pci_remove(): fix UAF When remove the module peek_pci, referencing 'chan' again after releasing 'dev' will cause UAF. Fix this by releasing 'dev' la…
- 7.5CVE-2020-1638EPSS 1.3%
The FPC (Flexible PIC Concentrator) of Juniper Networks Junos OS and Junos OS Evolved may restart after processing a specific IPv4 packet. Only packets destined to the device itself, successfully reaching the RE through existing edge and c…