Application Security
CWE-467 Use of sizeof() on a Pointer Type: Bug and Fix
sizeof applied to a pointer returns the pointer size, not the data size. CWE-467 explained with the malloc bug and a partial password check.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-466 Return of Pointer Value Outside of Expected Range
A function that returns a pointer beyond its buffer lets callers read or write the wrong memory. CWE-466 explained with detection tools like ASan.
Oct 18, 20262 min read
Application Security
CWE-464 Addition of Data Structure Sentinel
A stray null byte or end marker inside data silently truncates it. CWE-464 explained with the fgetc example and MITRE's mitigations.
Oct 18, 20262 min read
Application Security
CWE-463 Deletion of Data Structure Sentinel
Losing the null terminator or list end marker breaks the structure and can open access control problems. CWE-463 explained with a C example.
Oct 18, 20263 min read
Application Security
CWE-462 Duplicate Key in Associative List (Alist)
Duplicate keys in an association list can be mistaken for errors or hide logic flaws. CWE-462 explained with MITRE's Python example and the two fixes.
Oct 18, 20262 min read
Application Security
CWE-460 Improper Cleanup on Thrown Exception
Exceptions skip the code that releases locks and resources. CWE-460 explained with a Java thread lock example and the fix.
Oct 18, 20262 min read
Application Security
CWE-46 Trailing Space Path Equivalence and %20 Bypasses
A trailing space, or its encoded form %20, can make a server hand over source code. How CWE-46 works and how to prevent it.
Oct 18, 20263 min read
Application Security
CWE-459 Incomplete Cleanup: Temp Files and Leftover Resources
Temporary files and supporting resources that are not removed can leak data or exhaust a system. CWE-459 explained with a Java stream example.
Oct 18, 20263 min read
Application Security
CWE-457 Use of Uninitialized Variable: How to Find and Fix It
Reading a variable before it is set gives junk data an attacker can sometimes control. CWE-457 explained in C, C++ and PHP with fixes and detection.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.