CWE-1056—Invokable Control Element with Variadic Parameters
PUBLISHEDweakness record
released 2019-01-03 · last modified 2025-12-11
Metadata
- CWE ID：
- CWE-1056
- 摘要：
- Base
- 结构：
- Simple
- 状态：
- Incomplete
- 发布日期：
- 2019-01-03
- 更新日期：
- 2025-12-11
名称
Invokable Control Element with Variadic Parameters
描述
A named-callable or method control element has a signature that supports a variable (variadic) number of parameters or arguments.
常见后果
- 范围：
- Other
- 影响：
- Reduce Reliability
- 注释：
- This issue can prevent the product from running reliably. If the relevant code is reachable by an attacker, then this reliability problem might introduce a vulnerability. With variadic arguments, it can be difficult or inefficient for manual analysis to be certain of which function/method is being invoked.