Skip to content
OpenAdvisories

Weakness (CWE)

CWE-908: Use of Uninitialized Resource

Base Incomplete

The product uses or accesses a resource that has not been initialized.

How to prevent it (4 mitigations)

  1. Implementation

    Explicitly initialize the resource before use. If this is performed through an API function or standard procedure, follow all required steps.

  2. Implementation

    Pay close attention to complex conditionals that affect initialization, since some branches might not perform the initialization.

  3. Implementation

    Avoid race conditions (CWE-362) during initialization routines.

  4. Build and Compilation

    Run or compile the product with settings that generate warnings about uninitialized variables or data.

Source: MITRE CWE-908

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2024-50302 Exploited

    HID: core: zero-initialize the report buffer

    In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
    KEV Mar 4, 2025
  • Medium 5.5
    CVE-2024-29745 Exploited

    there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure w…

    Google Android Android
    KEV Apr 4, 2024