Umbra Wiki weakness weakness/CWE-475
Back to wiki

CWE-475 — Undefined Behavior for Input to API

provenance: imported · CWE: CWE-475

CWE-475: Undefined Behavior for Input to API

MITRE CWE weakness

Kind Weakness
Abstraction Base
Status Incomplete
Likelihood of exploit

Description

The behavior of this function is undefined unless its control parameter is set to a specific value.

Common consequences

  • Other: Quality Degradation, Varies by Context

Mitigations

(none listed)

References

  • CWE page: https://cwe.mitre.org/data/definitions/475.html
  • CWE list: https://cwe.mitre.org/data/index.html