이름: Incorrect Bitwise Shift of Integer

An integer value is specified to be shifted by a negative amount or an amount greater than or equal to the number of bits contained in the value.

일반 정보

취약점 도입 방식

Implementation : A developer might use shifts without properly verifying the size and sign of the shift amount.

적용 가능한 플랫폼

언어

이름: C (Undetermined)
이름: C++ (Undetermined)
이름: C# (Undetermined)
이름: Java (Undetermined)
이름: JavaScript (Undetermined)
이름: Python (Undetermined)

운영 체제

클래스: Not OS-Specific (Undetermined)

기술

클래스: Not Technology-Specific (Undetermined)

일반적인 결과

범위	영향	가능성
Integrity	DoS: Crash, Exit, or Restart
Other	Undefined Behavior, Unexpected State, Alter Execution Logic

관찰된 예시

참고 자료	설명
CVE-2023-4720	multimedia product performs a left shift with a negative value, leading to a crash
CVE-2009-4307	An unexpected large value in the ext4 filesystem causes an overshift condition resulting in a divide by zero.
CVE-2012-2100	An unexpected large value in the ext4 filesystem causes an overshift condition resulting in a divide by zero - fix of CVE-2009-4307.
CVE-2020-8835	An overshift in a kernel allowed out of bounds reads and writes resulting in a root takeover.
CVE-2015-1607	Program is not properly handling signed bitwise left-shifts causing an overlapping memcpy memory range error.
CVE-2016-9842	Compression function improperly executes a signed left shift of a negative integer.
CVE-2018-18445	Some kernels improperly handle right shifts of 32 bit numbers in a 64 bit register.
CVE-2013-4206	Putty has an incorrectly sized shift value resulting in an overshift.
CVE-2018-20788	LED driver overshifts under certain conditions resulting in a DoS.

잠재적 완화 방법

Phases : Implementation
Implicitly or explicitly add checks and mitigation for negative or over-shift values.

탐지 방법

Automated Static Analysis

Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without having to execute it. Typically, this is done by building a model of data flow and control flow, then searching for potentially-vulnerable patterns that connect "sources" (origins of input) with "sinks" (destinations where the data interacts with external components, a lower layer such as the OS, etc.)
효과성 : High

취약점 매핑 메모

근거 : This CWE entry is at the Base level of abstraction, which is a preferred level of abstraction for mapping to the root causes of vulnerabilities.
댓글 : Carefully read both the name and description to ensure that this mapping is an appropriate fit. Do not try to 'force' a mapping to a lower-level Base/Variant simply to comply with this preferred level of abstraction.

참고 자료

REF-1541

Secure Coding Guide for Python
OpenSSF.
https://best.openssf.org/Secure-Coding-Guide-for-Python/

제출

이름	조직	날짜	출시일	Version
CWE Content Team	MITRE	2021-03-29 +00:00	2021-07-20 +00:00	4.5

수정 사항

이름	조직	날짜	댓글
CWE Content Team	MITRE	2022-10-13 +00:00	updated Demonstrative_Examples, Observed_Examples
CWE Content Team	MITRE	2023-04-27 +00:00	updated Relationships
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2025-12-11 +00:00	updated Detection_Factors, Weakness_Ordinalities
CWE Content Team	MITRE	2026-04-30 +00:00	updated Observed_Examples
CWE Content Team	MITRE	2026-10-28 +00:00	updated Applicable_Platforms, Common_Consequences, Description, Modes_of_Introduction, References, Relationships, Taxonomy_Mappings

CWE-1335 상세 정보

CWE-1335