CWE-1068: Inconsistency Between Implementation and Documented Design
Filter
The implementation of the product is not consistent with the design as described within the relevant documentation.
What the weakness is: CWE-1068 at MITRE. All weaknesses
Ask an AI about CWE-1068
Show the prompt
Explain CWE-1068: Inconsistency Between Implementation and Documented Design and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1068.html and https://cve.bz/cve/cwe/1068?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- –CVE-2026-119078EPSS 0.2%
Apache Commons Codec's Blake3 class documented the output of its doFinalize methods as depending on any previously finalized bytes, so that consecutive calls would return different output. In fact, doFinalize does not change the hash state…
- 5.1CVE-2026-8149EPSS 0.2%
A vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on X86_64, AVX, AVX-512f, Linux, Legion of the Bouncy Castle Inc. BC-FJA bc-fips on Linux, X86_64, AVX, AVX-512f. This vulnerability is associated with program file…
- 8.1CVE-2025-48905EPSS 0.3%
Wasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of this vulnerability may cause the failure to capture specific Wasm exception types.
- 8.6CVE-2024-43798EPSS 0.4%
Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. The Chisel server doesn't ever read the documented `AUTH` environment variable used to set credentials, which allows any unauthenticated user to connect, even if cred…
- 4.3CVE-2024-3845EPSS 0.9%
Inappropriate implementation in Networks in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass mixed content policy via a crafted HTML page. (Chromium security severity: Low)