Incorrect Type Conversion or Cast
| Property | |
|---|---|
| Language |  |
| Severity |  |
| CWE | CWE-704: Incorrect Type Conversion or Cast |
| OWASP | A03:2017 - Sensitive Data Exposure |
| Confidence Level | Low |
| Impact Level | Low |
| Likelihood Level | Low |
Description#
Using Integer.toHexString() to convert hash or byte data to a hex string can strip leading zeroes from each byte, resulting in inconsistent or incorrect representations. This can cause different byte values to appear the same in the output.
Impact#
Incorrect hex conversion increases the risk of hash collisions, meaning distinct data may be represented by the same hash value. This weakens data integrity checks, potentially allowing attackers to bypass authentication, tamper with data, or cause other security failures that rely on unique hash values.