CWE-1046Creation of Immutable Text Using String Concatenation

PUBLISHEDweakness record
released 2019-01-03 · last modified 2025-12-11

Metadata

CWE ID:
CWE-1046
Abstraction:
Base
Structure:
Simple
Status:
Incomplete
Release Date:
2019-01-03
Latest Modification Date:
2025-12-11

Weakness Name

Creation of Immutable Text Using String Concatenation

Description

The product creates an immutable text string using string concatenation operations.

When building a string via a looping feature (e.g., a FOR or WHILE loop), the use of += to append to the existing string will result in the creation of a new object with each iteration, which can be inefficient in comparison with use of text buffer data elements.

Common Consequences

Scope:
Other
Impact:
Reduce Performance
Notes:
This issue can make the product perform more slowly. If the relevant code is reachable by an attacker, then this could be influenced to create performance problem.

Related Weaknesses