Skip to content
OpenAdvisories

Weakness (CWE)

CWE-456: Missing Initialization of a Variable

Variant Draft

The product does not initialize critical variables.

How to prevent it (2 mitigations)

  1. Implementation

    Ensure that critical variables are initialized before first use [REF-1485].

  2. Requirements

    Choose a language that is not susceptible to these issues.

Source: MITRE CWE-456

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.8
    CVE-2021-40403

    An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and …

    gerbv gerbv Debian Ubuntu
  • Medium 6.8
    CVE-2021-34703

    Cisco IOS and IOS XE Software Link Layer Discovery Protocol Denial of Service Vulnerability

    A vulnerability in the Link Layer Discovery Protocol (LLDP) message parser of Cisco IOS Software and Cisco IOS XE Software could allow an attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. This vulnerability …

    Cisco Cisco IOS iOS Network devices
  • Medium 5.9
    CVE-2019-3836

    It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versi…

    gnutls gnutls gnutls28 gnutls Debian Alpine
  • Medium 6.5
    CVE-2018-14641

    A security flaw was found in the ip_frag_reasm() function in net/ipv4/ip_fragment.c in the Linux kernel from 4.19-rc1 t…

    The Linux Foundation Kernel