Common Weakness Enumeration

    CWE Definition / CWE-789

    CWE-789: Memory Allocation with Excessive Size Value

    The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.

    Published:21 Oct 2009
    Organization:MITRE
    Modified:30 Apr 2026

    Related Weakness

    CWE-770: Allocation of Resources Without Limits or Throttling

    CWE-476: NULL Pointer Dereference