Challenges used in CGC were developed by multiple teams. Challenge authors were asked to supply information for challenges they developed. The following index shows the Common Weakness Enumerations for each challenge as specified by the challenge author.
CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
CROMU_00046, KPRCA_00088, KPRCA_00101, NRFIN_00054, NRFIN_00055, NRFIN_00065
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CROMU_00047, CROMU_00076, CROMU_00093, CROMU_00098, NRFIN_00053, NRFIN_00063
CWE-121 - Stack-based Buffer Overflow
CROMU_00064, CROMU_00065, CROMU_00066, CROMU_00073, CROMU_00084, CROMU_00088, CROMU_00094, KPRCA_00062, KPRCA_00064, KPRCA_00069, KPRCA_00071, KPRCA_00073, KPRCA_00079, KPRCA_00087, KPRCA_00093, KPRCA_00094, KPRCA_00099, KPRCA_00102, KPRCA_00110, KPRCA_00112, NRFIN_00053, NRFIN_00063, NRFIN_00064, YAN01_00015, YAN01_00016
CWE-122 - Heap-based Buffer Overflow
CROMU_00047, CROMU_00055, CROMU_00057, CROMU_00061, KPRCA_00075, KPRCA_00081, KPRCA_00086, KPRCA_00088, KPRCA_00101, NRFIN_00046, NRFIN_00061, NRFIN_00063, NRFIN_00067
CWE-123 - Write-what-where Condition
KPRCA_00074
CWE-124 - Buffer Underwrite ('Buffer Underflow')
CROMU_00072
CWE-125 - Out-of-bounds Read
CROMU_00054, CROMU_00058, CROMU_00078, KPRCA_00064, KPRCA_00074, KPRCA_00077, KPRCA_00111, NRFIN_00061, NRFIN_00064, NRFIN_00069, NRFIN_00071
CWE-126 - Buffer Over-read
KPRCA_00065, KPRCA_00068
CWE-127 - Buffer Under-read
CROMU_00077
CWE-129 - Improper Validation of Array Index
CROMU_00063, CROMU_00079, CROMU_00087, KPRCA_00064, KPRCA_00077, KPRCA_00111, NRFIN_00049, NRFIN_00051
CWE-131 - Incorrect Calculation of Buffer Size
CROMU_00048, CROMU_00055, CROMU_00066, CROMU_00072, NRFIN_00063, NRFIN_00067
CWE-134 - Use of Externally-Controlled Format String
KPRCA_00069, KPRCA_00120, NRFIN_00044, NRFIN_00053
CWE-135 - Incorrect Calculation of Multi-Byte String Length
CROMU_00095
CWE-170 - Improper Null Termination
NRFIN_00061, NRFIN_00064, NRFIN_00069
CWE-190 - Integer Overflow or Wraparound
CROMU_00055, CROMU_00092, NRFIN_00049, NRFIN_00052
CWE-191 - Integer Underflow (Wrap or Wraparound)
KPRCA_00111
CWE-193 - Off-by-one Error
CROMU_00051, CROMU_00083, CROMU_00096, NRFIN_00061, NRFIN_00064
CWE-196 - Unsigned to Signed Conversion Error
CROMU_00048, CROMU_00077
CWE-20 - Improper Input Validation
CROMU_00051, CROMU_00063, NRFIN_00044, NRFIN_00049, NRFIN_00051
CWE-200 - Information Exposure
CROMU_00054, NRFIN_00066
CWE-201 - Information Exposure Through Sent Data
NRFIN_00043, NRFIN_00044, NRFIN_00049, NRFIN_00051, NRFIN_00053, NRFIN_00059, NRFIN_00065, NRFIN_00066, NRFIN_00072
CWE-202 - Exposure of Sensitive Data Through Data Queries
YAN01_00016
CWE-215 - Information Exposure Through Debug Information
CROMU_00093
CWE-287 - Improper Authentication
KPRCA_00093
CWE-291 - Reliance on IP Address for Authentication
YAN01_00015
CWE-300 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
NRFIN_00066
CWE-310 - Cryptographic Issues
NRFIN_00066
CWE-316 - Cleartext Storage of Sensitive Information in Memory
CROMU_00063
CWE-388 - Error Handling
NRFIN_00045
CWE-398 - Indicator of Poor Code Quality
KPRCA_00077
CWE-416 - Use After Free
KPRCA_00100, NRFIN_00054
CWE-465 - Pointer Issues
KPRCA_00074, NRFIN_00066
CWE-514 - Covert Channel
NRFIN_00066
CWE-515 - Covert Storage Channel
NRFIN_00066
CWE-521 - Weak Password Requirements
KPRCA_00093
CWE-665 - Improper Initialization
CROMU_00063, NRFIN_00065
CWE-680 - Integer Overflow to Buffer Overflow
KPRCA_00119
CWE-681 - Incorrect Conversion between Numeric Types
KPRCA_00112
CWE-703 - Improper Check or Handling of Exceptional Conditions
NRFIN_00054, NRFIN_00055
CWE-704 - Incorrect Type Conversion or Cast
NRFIN_00054, NRFIN_00055, NRFIN_00067
CWE-786 - Access of Memory Location Before Start of Buffer
KPRCA_00091
CWE-787 - Out-of-bounds Write
CROMU_00061, CROMU_00082, CROMU_00092, KPRCA_00073, NRFIN_00053, NRFIN_00061, NRFIN_00063, NRFIN_00064, NRFIN_00067, NRFIN_00071
CWE-788 - Access of Memory Location After End of Buffer
CROMU_00097, NRFIN_00053, NRFIN_00061, NRFIN_00063, NRFIN_00064, NRFIN_00067
CWE-798 - Use of Hard-coded Credentials
CROMU_00093
CWE-805 - Buffer Access with Incorrect Length Value
NRFIN_00067
CWE-806 - Buffer Access Using Size of Source Buffer
NRFIN_00053
CWE-822 - Untrusted Pointer Dereference
NRFIN_00045, NRFIN_00056, NRFIN_00066
CWE-825 - Expired Pointer Dereference
KPRCA_00100, NRFIN_00054
CWE-839 - Numeric Range Comparison Without Minimum Check
KPRCA_00069, KPRCA_00071
CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
KPRCA_00097, NRFIN_00046, NRFIN_00054, NRFIN_00055
CWE-908 - Use of Uninitialized Resource
NRFIN_00071