Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1419: Incorrect Initialization of Resource

Class Incomplete

The product attempts to initialize a resource but does not correctly do so, which might leave the resource in an unexpected, incorrect, or insecure state when it is accessed.

More detail

This can have security implications when the associated resource is expected to have certain properties or values. Examples include a variable that determines whether a user has been authenticated or not, or a register or fuse value that determines the security state of the product.

How to prevent it (4 mitigations)

  1. Implementation

    Choose the safest-possible initialization for security-related resources.

  2. Implementation

    Ensure that each resource (whether variable, memory buffer, register, etc.) is fully initialized.

  3. Implementation

    Pay close attention to complex conditionals or reset sources that affect initialization, since some paths might not perform the initialization.

  4. Architecture and Design

    Ensure that the design and architecture clearly identify what the initialization should be, and that the initialization does not have security implications.

Source: MITRE CWE-1419

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.4
    CVE-2024-57375

    Andamiro Pump It Up 20th Anniversary (aka Double X or XX/2019) 1.00.0-2.08.3 allows a physically proximate attacker to …

    Andamiro Pump It Up
  • Low 3.2
    CVE-2023-45085

    When compute hosts are disabled and reenabled, they immediately transition to "ON", not "INIT"

    An issue exists in SoftIron HyperCloud where compute nodes may come online immediately without following the correct initialization process.  In this instance, workloads may be scheduled on these nodes and deploy to a failed or erroneous state, which impacts …

    SoftIron HyperCloud