CWE Database
/

CWE-758

Back to CWE list

CWE-758

Reliance on Undefined, Unspecified, or Implementation-Defined Behavior

Class
Incomplete

Description

The product uses an API function, data structure, or other entity in a way that relies on properties that are not always guaranteed to hold for that entity.

This can lead to resultant weaknesses when the required properties change, such as when the product is ported to a different platform or if an interaction error (CWE-435) occurs.

Common Consequences

Scope

Other

Impact

Reduce Maintainability, Unexpected State, Quality Degradation

CVE-2006-1902

Change in C compiler behavior causes resultant buffer overflows in programs that depend on behaviors that were undefined in the C standard.

Applicable Platforms

Not Language-Specific

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now