Amazon QDetector Library Sign in to Amazon Q

Amazon Q

Detector Library

PHP detectors (37/37)

Server Side Request Forgery SQL Injection Activated Debug Feature Sensitive information leak Log Injection Missing Authorization Origins-verified cross-origin communications Cross-site scripting Path Traversal Avoiding Exceptions in PHP OS command injection Incorrect Comparison Ldap Bind Without Password Sendfile Injection Integer Overflow or Wraparound Assert Use Loose file permissions Hardcoded credentials Improper Authentication Insecure connection Weak Random Number Generation Open Redirect Allow Url Fopen Or Include Insecure cryptography Object Input Stream Insecure Deserialization Cookie Without Http Only Flag Code Injection Zip bomb attack Unsafe Reflection Secure Signal Handling Deserialization of untrusted data Unrestricted File Upload Static Initialization Vector (IV)Coral Csrf Rule Insecure cookie Improper access control Insecure Object Attribute Modification

Integer Overflow or Wraparound High

When an arithmetic operation exceeds the maximum value an integer can hold, it may wrap around to a negative value or reset unexpectedly. To mitigate this, it is essential to validate input values, check for arithmetic boundaries, and use appropriate functions or libraries (e.g., BCMath) when handling large numbers. Proper validation and bounds checking ensure the integrity of operations and prevent unexpected overflows, reducing security risks.

Detector ID

php/integer-overflow@v1.0

Category

Common Weakness Enumeration (CWE)

Tags