CWEweakness

CWE-354 Improper Validation of Integrity Check Value

Medium Official page ↗
Abstraction
Base
Structure
Simple
Status
Draft
Likelihood of exploit
Medium
Languages
Not Language-Specific
CWE version
5.0

Description

The product does not validate or incorrectly validates the integrity check values or "checksums" of a message.

Common consequences

• Integrity, Other: Modify Application Data, Other — Integrity checks usually use a secret key that helps authenticate the data origin. Skipping integrity checking generally opens up the possibility that new data from an invalid source can be injected. • Integrity, Other: Other — Data that is parsed and used may be corrupted. • Non-Repudiation, Other: Hide Activities, Other — Without a checksum check, it is impossible to determine if any changes have been made to the data after it was sent.

Potential mitigations

• [Implementation] The protocol specification describes the algorithm used for calculating the checksum. It is then a matter of implementing the calculation and verifying that the calculated checksum and the received checksum match.

Detection methods

• Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without having to execute it. Typically, this is done by building a model of data flow and control flow, then searching for potentially-vulnerable patterns that connect "sources" (origins of input) with "sinks" (destinations where the data interacts with external components, a lower layer such as the OS, etc.)

Observed examples

• CVE-2024-47573: network analysis tool does not properly validate an integrity check value, allowing installation of malicious firmware

Related

Attack pattern · CAPEC (3)

  • CAPEC-145 Checksum Spoofing attack pattern
  • CAPEC-463 Padding Oracle Crypto Attack attack pattern
  • CAPEC-75 Manipulating Writeable Configuration Files attack pattern

Observed example · CVE (1)

  • CVE-2024-47573 An improper validation of integrity check value vulnerability [CWE-354] in FortiNDR version 7.4.2 and below, version 7.2.1 and below,… vulnerability

Child of · CWE (2)

  • CWE-345 Insufficient Verification of Data Authenticity weakness
  • CWE-754 Improper Check for Unusual or Exceptional Conditions weakness

Peer of · CWE (1)

  • CWE-353 Missing Support for Integrity Check weakness

Referenced by CAPEC · weakness (3)

  • CAPEC-145 Checksum Spoofing attack pattern
  • CAPEC-463 Padding Oracle Crypto Attack attack pattern
  • CAPEC-75 Manipulating Writeable Configuration Files attack pattern

Referenced by CVE · weakness (214)

  • CVE-2026-90720 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025… vulnerability
  • CVE-2026-116608 A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. vulnerability
  • CVE-2026-115906 zip is a zip library for Rust that supports reading and writing simple ZIP files. vulnerability
  • CVE-2026-65625 The pure-Erlang AES-GCM fallback in jose_jwa_aes derives the number of verified authentication tag bits from the attacker-supplied tag… vulnerability
  • CVE-2026-89320 `HmacShaCryptor.Hash` never hashed its input. vulnerability
  • CVE-2026-35501 When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both a root trust anchor and an additional… vulnerability
  • CVE-2026-113714 virtualenv is a tool for creating isolated virtual python environments. vulnerability
  • CVE-2026-85243 Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component. vulnerability
  • CVE-2026-85747 Distribution is a toolkit to pack, ship, store, and deliver container content. vulnerability
  • CVE-2026-105280 Improper Validation of Integrity Check Value vulnerability in hexpm hex allows a package mirror to substitute the tarball that mix… vulnerability
  • CVE-2026-109366 Zebra before 6.4.0 contains an improper integrity validation vulnerability in the inbound gossip download path that allows unauthenticated… vulnerability
  • CVE-2026-106434 The explicit decryption component of MongoDB libmongocrypt can return an unrecognized encrypted payload unchanged instead of returning a… vulnerability
  • CVE-2026-94444 Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/fips140 and operates a malicious GOMODPROXY… vulnerability
  • CVE-2026-94447 Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a… vulnerability
  • CVE-2026-84900 Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could potentially contain security vulnerabilities. vulnerability
  • CVE-2026-93317 An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed… vulnerability
  • CVE-2026-93318 A malicious image can advertise DiffIDs from another image while containing different layer contents. vulnerability
  • CVE-2026-71888 In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose digestAlgorithm and authAttrs… vulnerability
  • CVE-2026-85515 In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on the SEIPD version… vulnerability
  • CVE-2026-103601 Release of unverified plaintext in the CCM (CcmBlockCipher) and DSTU 7624 CCM (KCcmBlockCipher) AEAD modes in Legion of the Bouncy Castle… vulnerability
  • CVE-2026-15999 Improper validation of integrity check value in the AES-CCM implementation (CcmParameters and CcmBlockCipher) in Legion of the Bouncy… vulnerability
  • CVE-2026-16001 Exposure of the message authentication key through the encryption keystream in the stream mode of IesEngine (an IesEngine constructed… vulnerability
  • CVE-2026-102759 NetX Secure TLS accepts an empty application-data record without verifying its message authentication code. vulnerability
  • CVE-2026-95625 The Tauri updater plugin verifies update binaries using minisign signatures, but the signature covers only the raw binary bytes. vulnerability
  • CVE-2026-92701 Cocos AI is a confidential computing system for AI. vulnerability
  • CVE-2026-54578 mport is the MidnightBSD Package Manager. vulnerability
  • CVE-2026-54580 mport is the MidnightBSD Package Manager. vulnerability
  • CVE-2026-73459 On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP… vulnerability
  • CVE-2026-76852 Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in mtd_write allowing forged firmware authenticity… vulnerability
  • CVE-2026-54174 melange allows users to build apk packages using declarative pipelines. vulnerability
Show all 214 ›

Referenced by CWE · has member (2)

  • CWE-1460 Weaknesses Addressed by the Top 20 Secure PLC Coding Practices view
  • CWE-884 CWE Cross-section view

Referenced by CWE · peer of (1)

  • CWE-353 Missing Support for Integrity Check weakness