Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1419: Incorrect Initialization of Resource

Class Incomplete

The product attempts to initialize a resource but does not correctly do so, which might leave the resource in an unexpected, incorrect, or insecure state when it is accessed.

More detail

This can have security implications when the associated resource is expected to have certain properties or values. Examples include a variable that determines whether a user has been authenticated or not, or a register or fuse value that determines the security state of the product.

How to prevent it (4 mitigations)

  1. Implementation

    Choose the safest-possible initialization for security-related resources.

  2. Implementation

    Ensure that each resource (whether variable, memory buffer, register, etc.) is fully initialized.

  3. Implementation

    Pay close attention to complex conditionals or reset sources that affect initialization, since some paths might not perform the initialization.

  4. Architecture and Design

    Ensure that the design and architecture clearly identify what the initialization should be, and that the initialization does not have security implications.

Source: MITRE CWE-1419

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-73451

    On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces (SVI) in shared mode, restarting of the secondary switchcard forwarding agent or insertion of secondary switchcard, can

    On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces (SVI) in shared mode, restarting of the secondary switchcard forwarding agent or insertion of secondary switchcard, can ca…

    Arista Networks EOS Network devices
  • Medium 5.8
    CVE-2026-33773

    Junos OS: EX Series, QFX Series: If the same egress filter is configured on both an IRB and a physical interface one of those is not applied

    An Incorrect Initialization of Resource vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on specific EX Series and QFX Series device allows an unauthenticated, network-based attacker to cause an integrity impact to downstream n…

    Juniper Networks Junos OS Network devices
  • Medium 5.6
    CVE-2025-24495

    Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core™ Ultra Processors may allow a…

    intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  • Medium 5.4
    CVE-2024-0103

    CVE

    NVIDIA Triton Inference Server for Linux contains a vulnerability where a user may cause an incorrect Initialization of resource by network issue. A successful exploit of this vulnerability may lead to information disclosure.

    NVIDIA NVIDIA Triton Inference Server
  • Medium 6.7
    CVE-2023-5078

    A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileg…

    Lenovo ThinkPad BIOS