ISO/IEC PRF 24772-8

Programming languages — Avoiding vulnerabilities in programming languages — Part 8: Vulnerability descriptions for the programming language Fortran

Scope

This document itemizes programming language vulnerabilities in Fortran to be avoided in the
development of systems where assured behaviour is required for security, safety, mission-critical and
business-critical software. In general, this need for assured behaviour is applicable to the software
developed, reviewed, or maintained for any application.
This document explains how the vulnerabilities catalogued in ISO/IEC 24772-1:2024 “Programming
languages -- Avoiding vulnerabilities in programming languages -- Part 1: “Language-independent
catalogue of vulnerabilities” manifest in Fortran and documents mechanisms that can be used to
avoid the vulnerabilities.