CWE-1096—Singleton Class Instance Creation without Proper Locking or Synchronization

PUBLISHEDweakness record
released 2019-01-03 · last modified 2025-12-11

Metadata

CWE ID：
CWE-1096
摘要：
Variant
结构：
Simple
状态：
Incomplete
发布日期：
2019-01-03
更新日期：
2025-12-11

名称

Singleton Class Instance Creation without Proper Locking or Synchronization

描述

The product implements a Singleton design pattern but does not use appropriate locking or other synchronization mechanism to ensure that the singleton class is only instantiated once.

常见后果

范围：
Other
影响：
Reduce Reliability
注释：
This issue can prevent the product from running reliably, e.g. by making the instantiation process non-thread-safe and introducing deadlock (CWE-833) or livelock conditions. If the relevant code is reachable by an attacker, then this reliability problem might introduce a vulnerability.

相关 CWE

browse all CWEs