CWE-910
Use of Expired File Descriptor
Extended description
After a file descriptor for a particular file or device has been released, it can be reused. The code might not write to the original file, since the reused file descriptor might reference a different file or device.
Common consequences2
- ConfidentialityRead Files or Directories
The program could read data from the wrong file.
- AvailabilityDoS: Crash, Exit, or Restart
Accessing a file descriptor that has been closed can cause a crash.
Relationships1
- ChildOfCWE-672
CVEs referencing this CWE2
| CVE | Description | Severity | EPSS | Flags | Modified |
|---|---|---|---|---|---|
| CVE-2020-13530 | A denial-of-service vulnerability exists in the Ethernet/IP server functionality of the EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A large number of network requests in a small span of time can cause the running program to stop. An attacker can send a sequence of requests to trigger this vulnerability. | HIGH7.5 | 2.06%p79 | 2026-06-17 | |
| CVE-2026-47478 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause the use of an expired file descriptor. A successful exploit of this vulnerability might lead to denial of service. | HIGH7.5 | 0.30%p22 | 2026-07-15 |