Common Weakness Enumeration

    CWE Definition / CWE-785

    CWE-785: Use of Path Manipulation Function without Maximum-sized Buffer

    The product invokes a function for normalizing paths or file names, but it provides an output buffer that is smaller than the maximum possible size, such as PATH_MAX.

    Published:27 Jul 2009
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-676: Use of Potentially Dangerous Function

    CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

    CWE-20: Improper Input Validation

    CWE-785: Use of Path Manipulation Function without… | CVE-DB