CWE-1046: Creation of Immutable Text Using String Concatenation
The product creates an immutable text string using string concatenation operations.
Last updated
Overview
When building a string via a looping feature (e.g., a FOR or WHILE loop), the use of += to append to the existing string will result in the creation of a new object with each iteration, which can be inefficient in comparison with use of text buffer data elements.
Real-world CVEs
2 recorded CVEs are caused by CWE-1046 (Creation of Immutable Text Using String Concatenation). The highest-severity and most recent are shown first. 2 new CWE-1046 CVEs have been recorded so far in 2026.
Common consequences
What can happen when CWE-1046 is exploited.
Reduce Performance
Affects: Other
This issue can make the product perform more slowly. If the relevant code is reachable by an attacker, then this could be influenced to create performance problem.