CWE-409
Overview
- CWE ID
- 409
- CWE Name
- Improper Handling of Highly Compressed Data (Data Amplification)
- CWE Abstraction
- Base
- CWE structure
- Simple
- CWE Status
- Incomplete
Description
The software does not handle or incorrectly handles a compressed input with a very high compression ratio that produces a large output.
Extended Description
An example of data amplification is a "decompression bomb," a small ZIP file that can produce a large amount of data when it is decompressed.
Related CWEs
| CWE ID | View ID | Nature | Ordinal |
|---|---|---|---|
| 405 | 1000 | ChildOf | Primary |