CWE-1335 — Vulnerability Class 2

CWE-1335 represents a logical weakness where an integer undergoes a bitwise shift using a negative value or a magnitude exceeding the data type’s bit width. This error typically stems from insufficient validation of shift operands, leading to undefined behavior or indeterminate results that vary across different architectures and compilers. Attackers may exploit this inconsistency to trigger unexpected program states, potentially causing crashes, data corruption, or bypassing security checks that rely on predictable bitwise operations. To prevent such vulnerabilities, developers must rigorously validate shift amounts before execution, ensuring they fall within the valid range of zero to the bit width minus one. Implementing strict input sanitization and utilizing static analysis tools can help detect these out-of-bounds shifts early in the development lifecycle, thereby maintaining code integrity and preventing exploitation through undefined behavior.