All CWEs
CWE-1474
Non-Equivalent Data Transformation
ClassIncompleteSimple
The product parses or transforms data into another format,
structure, or representation, but the newly-produced data
is not semantically equivalent to the original data.
Common consequences1
- IntegrityOtherBypass Protection MechanismUnexpected StateVaries by Context
The consequences vary depending on how the transformed data is intended to be used. If the data influences behavior of the product such as affecting how a security decision is made, then this could bypass an intended protection mechanism.
Potential mitigations1
- Architecture and DesignImplementation
Validate the transformed data against what was expected to be produced. If the data is complex and free-form with some "special elements" in them, consider re-parsing the output to ensure that it matches expectations.
Relationships1
- ChildOfCWE-664
CVEs referencing this CWE
No CVEs reference this CWE yet
CWE assignments come from NVD/CNA assigners and OSS advisories. Some CWEs (Pillars, Composites) are abstract and rarely cited directly.