CWE-606

Unchecked Input for Loop Condition

The product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.

Mitigation

Phase: Implementation

Description:

  • Do not use user-controlled data for loop conditions.
Mitigation

Phase: Implementation

Description:

  • Perform input validation.

No CAPEC attack patterns related to this CWE.

Back to CWE stats page