Skip to content
OpenAdvisories

Weakness (CWE)

CWE-491: Public cloneable() Method Without Final

Variant Draft

A class has a cloneable() method that is not declared final, which allows an object to be created without calling the constructor. This can cause the object to be in an unexpected state.

How to prevent it (1 mitigation)

  1. Implementation

    Make the cloneable() method final.

Source: MITRE CWE-491

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2025-55622

    Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity s…