Abstract

ISO/IEC TR 24772:2013 specifies software programming language vulnerabilities to be avoided in the development of systems where assured behaviour is required for security, safety, mission-critical and business-critical software. In general, this guidance is applicable to the software developed, reviewed, or maintained for any application.

Vulnerabilities are described in a generic manner that is applicable to a broad range of programming languages.


General information 

  • Status
     :  Withdrawn
    Publication date
     : 2013-03
  • Edition
     : 2
    Number of pages
     : 319
  • Technical Committee
     : ISO/IEC JTC 1/SC 22 Programming languages, their environments and system software interfaces
  • ICS
     :
    35.060 Languages used in information technology

Life cycle


Got a question?

Check out our FAQs

Customer care
+41 22 749 08 88

Opening hours:
Monday to Friday - 09:00-12:00, 14:00-17:00 (UTC+1)

Keep up to date with ISO

Sign up to our newsletter for the latest news, views and product information.

  2. Store
  3. Standards catalogue
  4. TC
  5. ISO/IEC JTC 1/SC 22
  6. ISO/IEC TR 24772:2013