ISO/IEC NP 24772-8

Information technology — Programming languages — Guidance to avoiding vulnerabilities in programming languages — Part 8: Catalogue of vulnerabilities for the programming language Fortran ISO/IEC NP 24772-8

Scope

This document itemizes programming language vulnerabilities in Fortran to be avoided in the
development of systems where assured behaviour is required for security, safety, mission-critical and
business-critical software. In general, this need for assured behaviour is applicable to the software
developed, reviewed, or maintained for any application.
This document explains how the vulnerabilities catalogued in ISO/IEC 24772-1:2024 “Programming
languages -- Avoiding vulnerabilities in programming languages -- Part 1: “Language-independent
catalogue of vulnerabilities” manifest in Fortran and documents mechanisms that can be used to
avoid the vulnerabilities.