CWE-375: Returning a Mutable Object to an Untrusted Caller

Sending non-cloned mutable data as a return value may result in that data being altered or deleted by the calling function.

Published:19 Jul 2006

Organization:MITRE

Modified:11 Dec 2025

CWE-668: Exposure of Resource to Wrong Sphere