Common Weakness Enumeration

    CWE Definition / CWE-466

    CWE-466: Return of Pointer Value Outside of Expected Range

    A function can return a pointer to memory that is outside of the buffer that the pointer is expected to reference.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CWE-20: Improper Input Validation