A static code block creates an instance of a class.
View on MITREThis pattern identifies situations where a storable data element or member data element is initialized with a value in a block of code which is declared as static. This issue can make the product perform more slowly by performing initialization before it is needed. If the relevant code is reachable by an attacker, then this performance problem might introduce a vulnerability.
No mitigation information available for this CWE.
No detection method information available for this CWE.
No examples or observed CVEs available for this CWE.
No relationship information available for this CWE.
CWE-1063: Creation of Class Instance within a Static Code Block is a Common Weakness Enumeration (CWE) entry maintained by MITRE. A static code block creates an instance of a class. This pattern identifies situations where a storable data element or member data element is initialized with a value in a block of code which is declared as static. This issue can make the product perform more slowly by performing initialization before it is needed. If the relevant code is reachable by an attacker, then this performance problem might introduce a vulnerability.
If exploited, CWE-1063 (Creation of Class Instance within a Static Code Block) it can compromise Other, leading to outcomes such as Reduce Performance.
A CWE (Common Weakness Enumeration) like CWE-1063 describes a category of software weakness — the underlying flaw type. A CVE (Common Vulnerabilities and Exposures) identifies a specific, real-world vulnerability in a particular product. In short, a CWE is the kind of mistake, and a CVE is an instance of that mistake being found in software.