CWE-229: Improper Handling of Values

BaseIncomplete

The product does not properly handle when the expected number of values for parameters, fields, or arguments is not provided in input, or if those values are undefined.

View on MITRE
Back to CWE Lookup

Technical Details

Structure
Simple

Applicable To

Languages
Platforms

Frequently Asked Questions

What is CWE-229: Improper Handling of Values?+

CWE-229: Improper Handling of Values is a Common Weakness Enumeration (CWE) entry maintained by MITRE. The product does not properly handle when the expected number of values for parameters, fields, or arguments is not provided in input, or if those values are undefined.

What are the security consequences of Improper Handling of Values?+

If exploited, CWE-229 (Improper Handling of Values) it can compromise Integrity, leading to outcomes such as Unexpected State.

What is the difference between a CWE and a CVE?+

A CWE (Common Weakness Enumeration) like CWE-229 describes a category of software weakness — the underlying flaw type. A CVE (Common Vulnerabilities and Exposures) identifies a specific, real-world vulnerability in a particular product. In short, a CWE is the kind of mistake, and a CVE is an instance of that mistake being found in software.

Learn More