CWE-188 1 CVEs MITRE definition ↗

CWE-188: Reliance on Data/Memory Layout

Overview

CWE-188 (Reliance on Data/Memory Layout) documents a weakness type used across vulnerability databases and security assessments. Use the sections below for definition, context, and mapped CVEs.

Security impact
Security impact: Depends on product and context; use CVE records, severity scores, and MITRE guidance to prioritize.

Description

The product makes invalid assumptions about how protocol data or memory is organized at a lower level, resulting in unintended program behavior.

Applicable platforms

Kind Name Class Prevalence OS / CPE
language Not Language-Specific Undetermined
language C Undetermined
language C++ Undetermined

Related CVEs in this database

These CVEs are mapped to this weakness in this database and kept for traceability and search.

CVE Published Summary
CVE-2026-21493 2026-01-06 iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are vulnerable to Type Confusion in its CIccSingleSampledeCurveXml class during …

Previous names

  • Reliance on Data Layout (2008-04-11)

Content submission

Name
CLASP
Date
2006-07-19
Version
Draft 3

Content modifications

Date Name Version Importance Comment
2008-07-01 Eric Dalci 1.0 updated Time_of_Introduction
2008-09-08 CWE Content Team 1.0 updated Applicable_Platforms, Common_Consequences, Relationships, Other_Notes, Taxonomy_Mappings
2009-03-10 CWE Content Team 1.3 updated Relationships
2009-10-29 CWE Content Team 1.6 updated Common_Consequences
2011-03-29 CWE Content Team 1.12 updated Common_Consequences
2011-06-01 CWE Content Team 1.13 updated Common_Consequences
2012-05-11 CWE Content Team 2.2 updated References, Relationships
2012-10-30 CWE Content Team 2.3 updated Potential_Mitigations
2014-06-23 CWE Content Team 2.7 updated Description, Other_Notes
2014-07-30 CWE Content Team 2.8 updated Demonstrative_Examples, Relationships
2019-01-03 CWE Content Team 3.2 updated Description, Relationships
2021-03-15 CWE Content Team 4.4 updated References
2023-01-31 CWE Content Team 4.10 updated Description
2023-04-27 CWE Content Team 4.11 updated Detection_Factors, Relationships, Time_of_Introduction
2023-06-29 CWE Content Team 4.12 updated Mapping_Notes
2024-02-29 CWE Content Team 4.14 updated Demonstrative_Examples
2025-09-09 CWE Content Team 4.18 updated Affected_Resources, Functional_Areas
2025-12-11 CWE Content Team 4.19 updated Applicable_Platforms, Detection_Factors, References, Weakness_Ordinalities
cvelogic Threat Intelligence