This weakness occurs when a callable function or method is defined to accept a variable number of arguments (variadic parameters).
Variadic parameters can make code unreliable and difficult to secure because the function's behavior may change unpredictably depending on how many arguments are passed. This inconsistency can lead to crashes, incorrect calculations, or unexpected states, especially if an attacker can influence the number of arguments supplied. From a security analysis perspective, variadic functions obscure which specific implementation is being called, complicating both manual code review and automated analysis. This lack of clarity makes it harder to trace data flow, validate inputs, and identify vulnerabilities, potentially allowing security issues to go unnoticed.
Impact: Reduce Reliability