What are the risks of not mapping the instantiation and cleanup of variables containing privacy data?


Not mapping the instantiation and cleanup of variables containing privacy data can create the following security risks-

  • Unauthorized access (loss of confidentiality)
  • Data leaks (loss of confidentiality)
  • Dangling pointers (possible loss of confidentiality and integrity)
  • Ambiguity of scope and value of variables (loss of integrity and availability)
  • Memory leaks – leading to an unstable program prone to crashes (loss of availability)