CWE-758: Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
Description
The product uses an API function, data structure, or other entity in a way that relies on properties that are not always guaranteed to hold for that entity.
This can lead to resultant weaknesses when the required properties change, such as when the product is ported to a different platform or if an interaction error (CWE-435) occurs.
- Abstraction
- ClassAn abstract weakness, independent of any specific language or technology.
- Likelihood of exploit
- Not rated by MITRE
- Status
- Incomplete
Common consequences
- Other
Reduce Maintainability; Unexpected State; Quality Degradation
Related weaknesses
Parent weaknesses
Child weaknesses
- CWE-474Use of Function with Inconsistent Implementations
- CWE-562Return of Stack Variable Address
- CWE-587Assignment of a Fixed Address to a Pointer
- CWE-588Attempt to Access Child of a Non-structure Pointer
- CWE-1038Insecure Automated Optimizations
- CWE-1102Reliance on Machine-Dependent Data Representation
- CWE-1103Use of Platform-Dependent Third Party Components
- CWE-1105Insufficient Encapsulation of Machine-Dependent Functionality
CAPEC attack patterns that exploit it
CWE 4.20 links no CAPEC attack pattern to this weakness.