CWE-242

Overview
  • CWE ID
  • 242
  • CWE Name
  • Use of Inherently Dangerous Function
  • CWE Abstraction
  • Base
  • CWE structure
  • Simple
  • CWE Status
  • Draft
Description
The program calls a function that can never be guaranteed to work safely.
Extended Description
Certain functions behave in dangerous ways regardless of how they are used. Functions in this category were often implemented without taking security concerns into account. The gets() function is unsafe because it does not perform bounds checking on the s
Related CWEs
CWE ID View ID Nature Ordinal
1177 1000 ChildOf Primary