Base weakness
Incomplete
CWE-1063: Creation of Class Instance within a Static Code Block
A static code block creates an instance of a class.
0
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
Not rated
Likelihood of exploit
Per MITRE
Base
Abstraction
MITRE classification
Overview
This pattern identifies situations where a storable data element or member data element is initialized with a value in a block of code which is declared as static.
Common consequences
What can happen when CWE-1063 is exploited.
Reduce Performance
Affects: Other
This issue can make the product perform more slowly by performing initialization before it is needed. If the relevant code is reachable by an attacker, then this performance problem might introduce a vulnerability.
How it happens
When it is introduced
Typically introduced during these phases of the software lifecycle.
Implementation
Terminology & mappings
Mapped taxonomies
- (ASCPEM-PRF-1)