CWE Database
/

CWE-1109

Back to CWE list

CWE-1109

Use of Same Variable for Multiple Purposes

Base
Incomplete

Description

The code contains a callable, block, or other code element in which the same variable is used to control more than one unique task or store more than one instance of data.

Common Consequences

Scope

Other

Impact

Reduce Maintainability

Scope

Other

Impact

Increase Analytical Complexity

CVE-2023-26463

Chain: IPSec VPN product uses the same variable for multiple purposes in the same function (CWE-1109), leading to incorrect access control (CWE-284) and expired pointer dereference (CWE-825)

Applicable Platforms

Not Language-Specific

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now