Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1419: Incorrect Initialization of Resource

Class Incomplete

The product attempts to initialize a resource but does not correctly do so, which might leave the resource in an unexpected, incorrect, or insecure state when it is accessed.

More detail

This can have security implications when the associated resource is expected to have certain properties or values. Examples include a variable that determines whether a user has been authenticated or not, or a register or fuse value that determines the security state of the product.

How to prevent it (4 mitigations)

  1. Implementation

    Choose the safest-possible initialization for security-related resources.

  2. Implementation

    Ensure that each resource (whether variable, memory buffer, register, etc.) is fully initialized.

  3. Implementation

    Pay close attention to complex conditionals or reset sources that affect initialization, since some paths might not perform the initialization.

  4. Architecture and Design

    Ensure that the design and architecture clearly identify what the initialization should be, and that the initialization does not have security implications.

Source: MITRE CWE-1419

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.