ISO/IEC 24772-1:2024Published

Programming languages — Avoiding vulnerabilities in programming languages — Part 1: Language-independent catalogue of vulnerabilities

Langages de programmation — Conduite pour éviter les vulnérabilités dans les langages de programmation — Partie 1: Catalogue de vulnérabilités indépendant du langage

Abstract / scope

This document enumerates approaches and techniques to avoid software programming language vulnerabilities in the development of systems where assured behaviour is required for security, safety, mission-critical and business-critical software. In general, the description of the vulnerabilities and description of avoidance mechanisms are applicable to the software developed, reviewed, or maintained for any application.

Vulnerabilities are described in a generic manner that is applicable to a broad range of programming languages.

Life cycle

Amendments & corrigenda

ISO/IEC 24772-1:2024/DAmd 1Under developmentProgramming languages — Avoiding vulnerabilities in programming languages — Part 1: Language-independent catalogue of vulnerabilities — Amendment 1: Code representation differs between compiler view and reader viewInternational Standard · ISO/IEC JTC 1/SC 22

Replaces

ISO/IEC TR 24772-1:2019WithdrawnProgramming languages — Guidance to avoiding vulnerabilities in programming languages — Part 1: Language-independent guidanceTechnical Report · Published 10 Dec 2019 · ISO/IEC JTC 1/SC 22