The product contains a finalize() method that does not call super.finalize().
View on MITREThe Java Language Specification states that it is a good practice for a finalize() method to call super.finalize().
Call the super.finalize() method.
Use static analysis tools to spot such issues in your code.
No detection method information available for this CWE.
The following method omits the call to super.finalize().
CWE-568: finalize() Method Without super.finalize() is a Common Weakness Enumeration (CWE) entry maintained by MITRE. The product contains a finalize() method that does not call super.finalize(). The Java Language Specification states that it is a good practice for a finalize() method to call super.finalize().
If exploited, CWE-568 (finalize() Method Without super.finalize()) it can compromise Other, leading to outcomes such as Quality Degradation.
Recommended mitigations for CWE-568 include: Call the super.finalize() method. Use static analysis tools to spot such issues in your code.
CWE-568 commonly affects Java. Note that weaknesses are often language-agnostic patterns, so secure coding practices apply broadly.
A CWE (Common Weakness Enumeration) like CWE-568 describes a category of software weakness — the underlying flaw type. A CVE (Common Vulnerabilities and Exposures) identifies a specific, real-world vulnerability in a particular product. In short, a CWE is the kind of mistake, and a CVE is an instance of that mistake being found in software.