CWE-682

• CWE ID
• 682

• CWE Name
• Incorrect Calculation

• CWE Abstraction
• Pillar

• CWE structure
• Simple

• CWE Status
• Draft

The software performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.

When software performs a security-critical calculation incorrectly, it might lead to incorrect resource allocations, incorrect privilege assignments, or failed comparisons among other things. Many of the direct results of an incorrect calculation can lead