Common Weakness Enumeration

    CWE Definition / CWE-621

    CWE-621: Variable Extraction Error

    The product uses external input to determine the names of variables into which information is extracted, without verifying that the names of the specified variables are valid. This could cause the program to overwrite unintended variables.

    Published:7 May 2007
    Organization:MITRE
    Modified:30 Apr 2026

    Related Weakness

    CWE-914: Improper Control of Dynamically-Identified Variables

    CWE-471: Modification of Assumed-Immutable Data (MAID)