Description
View on MITREExtended Description
Before acting on the Intent, check the Intent Action to make sure it matches the expected System action.
No detection method information available for this CWE.
No examples or observed CVEs available for this CWE.
No relationship information available for this CWE.
CWE-925: CWE-925: Improper Verification of Intent by Broadcast Receiver is a Common Weakness Enumeration (CWE) entry maintained by MITRE. Description Extended Description
If exploited, CWE-925 (CWE-925: Improper Verification of Intent by Broadcast Receiver) it can compromise Gain Privileges or Assume Identity, leading to outcomes such as Scope: Integrity Another application can impersonate the operating system and cause the software to perform an unintended action..
Recommended mitigations for CWE-925 include: Before acting on the Intent, check the Intent Action to make sure it matches the expected System action.
CWE-925 commonly affects Languages. Note that weaknesses are often language-agnostic patterns, so secure coding practices apply broadly.
A CWE (Common Weakness Enumeration) like CWE-925 describes a category of software weakness — the underlying flaw type. A CVE (Common Vulnerabilities and Exposures) identifies a specific, real-world vulnerability in a particular product. In short, a CWE is the kind of mistake, and a CVE is an instance of that mistake being found in software.