Use of Platform-Dependent Third Party Components

Incomplete Base
Structure: Simple
Description

This weakness occurs when software depends on third-party libraries or components that behave differently or lack support across various target platforms or operating systems.

Extended Description

Relying on platform-specific components creates a fragmented codebase where features or security controls may work on one system but fail on another. This inconsistency forces developers to write and maintain multiple code paths, increasing complexity and the likelihood of introducing errors during adaptation or updates. From a security perspective, this complexity directly hinders maintenance, making it slower and more difficult to identify, patch, or backport fixes for vulnerabilities across all platforms. The extra effort required to manage these disparities can lead to delayed security updates and inconsistent protection, leaving some deployments exposed for longer periods.

Common Consequences 1
Scope: Other

Impact: Reduce Maintainability

References 1
Providing a Framework for Effective Software Quality Assessment
Robert A. Martin and Lawrence H. Shafer
07-1996
ID: REF-963