CWE•Variant•Draft•1 recent CVE
CWE-456Missing Initialization of a Variable
Description
The product does not initialize critical variables.
Common consequences
- Integrity,Other→Unexpected State,Quality Degradation,Varies by ContextThe execution environment might use unexpected values. The uninitialized data may be invalid, causing logic errors within the program. In some cases, this could result in a security problem.
Potential mitigations
- ImplementationEnsure that critical variables are initialized before first use [REF-1485].
- RequirementsChoose a language that is not susceptible to these issues.
Related CWEs
CWE-909Missing Initialization of ResourceCWE-665Improper InitializationCWE-665Improper InitializationCWE-89Improper Neutralization of Special Elements used in an SQL CommandCWE-120Buffer Copy without Checking Size of InputCWE-98Improper Control of Filename for Include/Require Statement in PHP ProgramCWE-457Use of Uninitialized Variable