CWE-403: Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')

A process does not close sensitive file descriptors before invoking a child process, which allows the child to perform unauthorized I/O operations using those descriptors.

Published:19 Jul 2006

Organization:MITRE

Modified:11 Dec 2025

Related Weakness

CWE-402: Transmission of Private Resources into a New Sphere ('Resource Leak')

Details