CWE•Variant•Draft•0 recent CVEs

CWE-456Missing Initialization of a Variable

Description

The product does not initialize critical variables, which causes the execution environment to use unexpected values.

Common consequences

Integrity,Other→Unexpected State,Quality Degradation,Varies by Context
The uninitialized data may be invalid, causing logic errors within the program. In some cases, this could result in a security problem.

Potential mitigations

Implementation
Ensure that critical variables are initialized before first use [REF-1485].
Requirements
Choose a language that is not susceptible to these issues.

Related CWEs

CWE-909Missing Initialization of Resource CWE-665Improper Initialization CWE-665Improper Initialization CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')CWE-98Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')CWE-457Use of Uninitialized Variable