Inefficient CPU Computation
Incomplete Class
Structure: Simple
Description
The product performs CPU computations using algorithms that are not as efficient as they could be for the needs of the developer, i.e., the computations can be optimized further.
This issue can make the product perform more slowly, possibly in ways that are noticeable to the users. If an attacker can influence the amount of computation that must be performed, e.g. by triggering worst-case complexity, then this performance problem might introduce a vulnerability.
Common Consequences 2
Scope: Availability
Impact: DoS: Resource Consumption (CPU)
Scope: Other
Impact: Reduce Performance
Observed Examples 1
CVE-2022-37734Chain: lexer in Java-based GraphQL server does not enforce maximum of tokens early enough (Incorrect Behavior Order), allowing excessive CPU consumption (Inefficient CPU Computation)
References 1
Computational complexity theory)
Wikipedia
ID: REF-1008
Modes of Introduction
Architecture and Design
Implementation
Related Weaknesses