CWE-484Base

Omitted Break Statement in Switch

Draft in the CWE catalog · 1 CVE mapped

1
CVEs mapped
3.7
Median CVSS
What it is

The product omits a break statement within a switch or similar construct, causing code associated with multiple conditions to execute. This can cause problems when the programmer only intended to execute code associated with one condition.

Recent examples
3.7cvss
CVE-2026-44075

Missing break in DSI OpenSession

A missing break statement in DSI OpenSession processing in Netatalk 1.5.0 through 4.4.2 causes a DSIOPT_ATTNQUANT switch case to fall through into DSIOPT_SERVQUANT, resulting in unintended session option handling that may allow a remote attacker to cause a minor service disruption via crafted DSI session options.

LOWno explanation yet
0%
epss
The record
Technical detail
CWE ID
CWE-484
Abstraction
Base
Structure
Simple
Status
Draft
References (1)
https://cwe.mitre.org/documents/sources/TheCLASPApplicationSecurityProcess.pdf