CWE-1046: Creation of Immutable Text Using String Concatenation

Filter

The product creates an immutable text string using string concatenation operations.

What the weakness is: CWE-1046 at MITRE. All weaknesses

Ask an AI about CWE-1046

Show the prompt

Explain CWE-1046: Creation of Immutable Text Using String Concatenation and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1046.html and https://cve.bz/cve/cwe/1046?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

7.5CVE-2026-42499EPSS 0.8%2026-05-07
Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.
4.2CVE-2026-23955EPSS 0.2%2026-01-21
EVerest is an EV charging software stack. Prior to version 2025.9.0, in several places, integer values are concatenated to literal strings when throwing errors. This results in pointers arithmetic instead of printing the integer value as e…