CWE-681 数值类型间的不正确转换 类漏洞列表 48

CWE-681 数值类型间的不正确转换 类弱点 48 条 CVE 漏洞汇总，含 AI 中文分析。

常见影响 (1)

Other, Integrity Unexpected State, Quality Degradation

The program could wind up using the wrong number and generate incorrect results. If the number is used to allocate resources or make a security decision, then this could introduce a vulnerability.

缓解措施 (1)

Implementation Avoid making conversion between numeric types. Always check for the allowed ranges.

代码示例 (2)

In the following Java example, a float literal is cast to an integer, thus causing a loss of precision.

int i = (int) 33457.8f;

Bad · Java

This code adds a float and an integer together, casting the result to an integer.

$floatVal = 1.8345; $intVal = 3; $result = (int)$floatVal + $intVal;

Bad · PHP