CREST Practitioner Security Analyst (CPSA) Practice

Identify a vulnerability often encountered in Objective-C programming.

1. Code Insertion

2. Log Injection

3. Memory Leak

4. Invalid Memory Access

The correct answer is: Code Insertion

In Objective-C programming, a common vulnerability is memory leak. This issue arises when a program allocates memory but fails to release it after use, which can lead to increased memory consumption and can ultimately cause the application to crash or behave erratically over time. In languages like Objective-C, which relies heavily on manual memory management, programmers must be vigilant about managing memory properly. When looking at other options, code insertion typically refers to the ability of an attacker to add malicious code to software, which is less about the specifics of Objective-C and more a general programming issue. Log injection involves altering log files, which is more about logging practices than language-specific vulnerabilities. Invalid memory access often leads to crashes, but is more of a symptom than a specific vulnerability endemic to Objective-C's architecture. Therefore, memory leak is the most prevalent vulnerability in Objective-C, and developers must implement proper memory management techniques to avoid it.