CWE-606

Unchecked Input for Loop Condition
AI Translation Available

The product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.

Status
draft
Abstraction
base

Common Consequences

availability
Impacts
dos: resource consumption (cpu)

Detection Methods

automated static analysis

Potential Mitigations

Phases:
implementation
Descriptions:
• Do not use user-controlled data for loop conditions.
• Perform input validation.