Application Security
CWE-197 Numeric Truncation Error: Lost Bits, Lost Safety
Casting a wide number to a narrow type drops the high bits, and a small buffer follows. How CWE-197 works, with real CVE chains and fixes.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-196 Unsigned to Signed Conversion Error: Underwrite Risk
Casting a large unsigned value to a signed type turns it negative, and negative indexes read or write below a buffer. CWE-196 explained.
Oct 18, 20262 min read
Application Security
CWE-195 Signed to Unsigned Conversion Error: Negative Becomes Huge
A negative error code cast to an unsigned size becomes an enormous number. How CWE-195 leads to buffer overflows and how to check before casting.
Oct 18, 20262 min read
Application Security
CWE-194 Unexpected Sign Extension: When Negative Numbers Grow
Widening a negative number into a larger type can produce a huge or surprising value. CWE-194 explained with C examples and fixes.
Oct 18, 20263 min read
Application Security
CWE-193 Off-by-one Error: Small Mistake, Large Consequences
A boundary that is one too large or one too small can corrupt memory or crash a service. How CWE-193 happens in C code and how to avoid it.
Oct 18, 20263 min read
Application Security
CWE-192 Integer Coercion Error: Casts That Change Values
Type casting, extension and truncation can change a number silently. How CWE-192 leads to crashes and memory errors and how to guard against it.
Oct 18, 20262 min read
Application Security
CWE-191 Integer Underflow (Wrap or Wraparound): Causes and Fixes
Subtracting past the lowest value an integer can hold yields a wrong result, often a huge number. How CWE-191 works and how to guard subtraction.
Oct 18, 20262 min read
Application Security
CWE-190 Integer Overflow or Wraparound: How It Happens and How to Fix It
When a calculation exceeds what an integer can hold, the value wraps and later code goes wrong. How CWE-190 leads to small buffers and what to do.
Oct 18, 20264 min read
Application Security
CWE-188 Reliance on Data/Memory Layout: Why Assumptions Break
Code that assumes how structs, padding or protocol fields are arranged breaks when platforms or protocol versions change. CWE-188 and how to test for it.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.