Uncontrolled Format String - Checkmarx issue

Rishi2Monk has asked for the wisdom of the Perl Monks concerning the following question:

Why the checkmarx throws uncontrolled format string error with the below code? Can someone please explain and share the solution?

open (STAT, "<", "$file")
while ( $content = <STAT> ) {
     :
    $errcnt  = $total - $content;
}

:

printf RPT "  Number of Rejected Records   : $errcnt\n";
[download]

Back to Seekers of Perl Wisdom