이름: Improper Validation of Consistency within Input

The product receives a complex input with multiple elements or fields that must be consistent with each other, but it does not validate or incorrectly validates that the input is actually consistent.

일반 정보

배경 세부 정보

취약점 도입 방식

Implementation

적용 가능한 플랫폼

언어

클래스: Not Language-Specific (Often)

일반적인 결과

범위	영향	가능성
Other	Varies by Context 참고: When complex inputs are inconsistent, attackers could trigger unexpected errors, cause incorrect actions to take place, or exploit latent vulnerabilities.

관찰된 예시

참고 자료	설명
CVE-2018-16733	product does not validate that the start block appears before the end block
CVE-2006-3790	size field that is inconsistent with packet size leads to buffer over-read
CVE-2008-4114	system crash with offset value that is inconsistent with packet size

잠재적 완화 방법

Phases : Implementation

취약점 매핑 메모

근거 : This CWE entry is at the Base level of abstraction, which is a preferred level of abstraction for mapping to the root causes of vulnerabilities.
댓글 : Carefully read both the name and description to ensure that this mapping is an appropriate fit. Do not try to 'force' a mapping to a lower-level Base/Variant simply to comply with this preferred level of abstraction.

메모

This entry is still under development and will continue to see updates and content improvements.

제출

이름	조직	날짜	출시일	Version
CWE Content Team	MITRE	2020-06-24 +00:00	2020-02-24 +00:00	4.1

수정 사항

이름	조직	날짜	댓글
CWE Content Team	MITRE	2023-04-27 +00:00	updated Relationships
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2025-12-11 +00:00	updated Weakness_Ordinalities
CWE Content Team	MITRE	2026-10-28 +00:00	updated Background_Details, Common_Consequences, Description, Dimensions

CWE-1288 상세 정보

CWE-1288