CWE-675Class

Multiple Operations on Resource in Single-Operation Context

Draft in the CWE catalog · 2 CVEs mapped

2
CVEs mapped
7.8
Median CVSS
What it is

The product performs the same operation on a resource two or more times, when the operation should only be applied once.

Recent examples
7.8cvss
CVE-2025-68973

In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted…

⚡ A quirky index mishap in GnuPG could lead to an out-of-bounds write, which is like a baker accidentally adding too much yeast and having the dough overflow! Think of it as a recipe gone wrong where the chef mistakenly counts the number of eggs twice, resulting in a chaotic baking disaster. It might seem minor, but the consequences can lead to a lot of wasted ingredients—or in this case, data! An attacker could exploit this vulnerability to write data outside the intended bounds, potentially causing the program to misbehave or even crash. This could compromise the integrity of the system and lead to unpredictable behavior, leaving your sensitive data dangerously exposed.

HIGH
0%
epss
none
CVE-2019-17638

In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error

⚠️ A double dose of ByteBuffer chaos! In Jetty, response headers can spill the beans on what shouldn’t be shared, leaving client data vulnerable to mix-ups. 🔥 Think of it like a crowded restaurant where two waiters are trying to serve food from the same table. If they both assume they have the same dish to deliver, one might accidentally serve someone else's meal, potentially revealing a secret recipe or two! An attacker could exploit this oversight to serve sensitive data from one client to another—imagine a user seeing someone else's session IDs or authentication credentials, which could lead to unauthorized access. It's a surprisingly sneaky way to leak sensitive information, and it could be devastating for your users!

11%
epss
The record
Technical detail
CWE ID
CWE-675
Abstraction
Class
Structure
Simple
Status
Draft