Weakness (CWE)

CWE-111: Direct Use of Unsafe JNI

Variant Draft

When a Java application uses the Java Native Interface (JNI) to call code written in another programming language, it can expose the application to weaknesses in that code, even if those weaknesses cannot occur in Java.

How to prevent it (3 mitigations)

Implementation

Implement error handling around the JNI call.
Implementation

Do not use JNI calls if the native library can't be trusted.
Implementation

Be reluctant to use JNI calls. A Java API equivalent may exist.

Source: MITRE CWE-111

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.