CWE-663Base

Use of a Non-reentrant Function in a Concurrent Context

Draft in the CWE catalog · 1 CVE mapped

1
CVEs mapped
7.0
Median CVSS
What it is

The product calls a non-reentrant function in a concurrent context in which a competing code sequence (e.g. thread or signal handler) may have an opportunity to call the same function or otherwise influence its state.

Recent examples
7.0cvss
CVE-2026-26201

emp3r0r Affected by Concurrent Map Access DoS (panic/crash)

emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 3.21.2, multiple shared maps are accessed without consistent synchronization across goroutines. Under concurrent activity, Go runtime can trigger `fatal error: concurrent map read and map write`, causing C2 process crash (availability loss). Version 3.21.2 fixes this issue.

HIGHno explanation yet
0%
epss
The record
Technical detail
CWE ID
CWE-663
Abstraction
Base
Structure
Simple
Status
Draft
References (2)
https://docs.oracle.com/javase/1.5.0/docs/api/java/util/concurrent/locks/ReentrantLock.htmlhttps://archive.ph/rl1XR