Skip to content
ImpactrStart an engagement

CWE-432

Dangerous Signal Handler not Disabled During Sensitive Operations

The product uses a signal handler that shares state with other signal handlers, but it does not properly mask or prevent those signal handlers from being invoked while the original signal handler is still running.

Impactr finds and proves whether CWE-432 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.