CWE-118 (对可索引资源的访问不恰当(越界错误)) — Vulnerability Class 11

CWE-118, Incorrect Access of Indexable Resource, is a critical memory safety weakness where software fails to properly validate bounds before accessing indexed data structures like arrays or buffers. Attackers typically exploit this vulnerability by supplying crafted input that exceeds the allocated resource limits, enabling unauthorized memory reads or writes. This can lead to severe consequences, including application crashes, data corruption, or the execution of arbitrary code through buffer overflow techniques. To mitigate this risk, developers must implement rigorous input validation and enforce strict boundary checks before any indexing operation. Utilizing safe programming languages with automatic memory management, employing static analysis tools to detect out-of-bounds access, and adopting defensive coding practices that explicitly verify array indices against their maximum valid values are essential strategies for preventing these exploitable errors in production environments.