CWE-1265: Unintended Reentrant Invocation of Non-reentrant Code Via Nested Calls
Filter
The product invokes code that is believed to be reentrant, but the code performs a call that unintentionally produces a nested invocation of non-reentrant code.
What the weakness is: CWE-1265 at MITRE. All weaknesses
Related attack patterns (CAPEC): 1
- CAPEC-74 Manipulating State Likelihood: Medium · Severity: High
The attack patterns MITRE's CAPEC relates to CWE-1265, as MITRE names them. Credits.
Ask an AI about CWE-1265
Show the prompt
Explain CWE-1265: Unintended Reentrant Invocation of Non-reentrant Code Via Nested Calls and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1265.html and https://cve.bz/cve/cwe/1265?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.7CVE-2026-104608EPSS 0.4%
A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). babeld held references into internal collections while calling into the SSH library, where a re-entrant callback could modify a c…
- 6.9CVE-2026-119141EPSS 0.4%
Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows malicious Wasm modules to panic the host because the may_leave flag is not cleared during realloc. Attackers can call into the ho…
- 5.9CVE-2026-119136EPSS 0.2%
Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains insufficient checks in Store when mixing async-style and sync-style WebAssembly calls. Embedders re-entering WebAssembly via sync APIs from host functions called asynchronousl…
- 8.8CVE-2023-25240EPSS 1.0%
An improper SameSite Attribute vulnerability in pimCore v10.5.15 allows attackers to execute arbitrary code.