VYPR

CWE-386

Symbolic Name not Mapping to Correct Object

BaseDraft

Description

A constant symbolic reference to an object is used, even though the reference can resolve to a different object over time.

Hierarchy (View 1000)

Parents

Children

none

CVEs mapped to this weakness (2)

  • CVE-2024-3852HigApr 16, 2024
    risk 0.49cvss 7.5epss 0.01

    GetBoundName could return the wrong version of an object when JIT optimizations were applied. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.

  • CVE-2026-53081HigJun 24, 2026
    risk 0.44cvss 7.8epss 0.00

    In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars When regsafe() compares two scalar registers that both carry BPF_ADD_CONST, check_scalar_ids() maps their full compound id (aka base |…