This document specifies software programming language vulnerabilities to be avoided in the development of systems where assured behaviour is required for security, safety, mission-critical and business-critical software. Language-specific descriptions of these vulnerabilities are provided in other parts of the ISO/IEC 24772 series.

It is applicable to the software developed, reviewed, or maintained for any application.Cross References:ISO/IEC 2382ISO 80000-2IEC 61508ISO/IEC TR 24731-1ISO/IEC 8652ISO/IEC 14882ISO/IEC TR 15942ISO/IEC 9899ISO/IEC 1539-1ISO/IEC 15408ISO/IEC TR 24718ISO/IEC 10967-1:2012 ISO/IEC 10967-2:2001ISO/IEC 10967-3:2006ISO/IEC/IEEE 60559:2011 ISO/IEC 30170:2012