Documentation
README
Exploiting Integer Overflow Vulnerabilities
When to Use
- During authorized assessments of native code (C/C++/Rust/Go) where attacker-controlled integers feed size, length, count, index, or offset calculations.
- When an allocation size is computed from arithmetic (
count * elem_size,len - header,size + padding) that can wrap, producing an undersized buffer later written with the logical (un-wrapped) size โ a classic integer-overflow-to-heap-overflow chain. - When a length/bounds check uses a narrow type (e.g. 1-byte size field) that can be overflowed to bypass validation while the real copy uses a larger value.
- When signed/unsigned confusion causes a negative input to be treated as a huge positive size.
Critical: Concepts/Steps Most Often Missed
This is the opening of the README. Read the full README on GitHub.