Skip to content
OpenAdvisories

Weakness (CWE)

CWE-909: Missing Initialization of Resource

Class Incomplete

The product does not initialize a critical resource.

How to prevent it (4 mitigations)

  1. Implementation

    Explicitly initialize the resource before use. If this is performed through an API function or standard procedure, follow all specified steps.

  2. Implementation

    Pay close attention to complex conditionals that affect initialization, since some branches might not perform the initialization.

  3. Implementation

    Avoid race conditions (CWE-362) during initialization routines.

  4. Build and Compilation

    Run or compile your product with settings that generate warnings about uninitialized variables or data.

Source: MITRE CWE-909

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.3
    CVE-2025-54410

    Moby's Firewalld reload removes bridge network isolation

    Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld…

    moby moby docker.io docker.io Debian Ubuntu Go
  • Low 2.6
    CVE-2024-32945

    LaTeX post content manipulation via renderer state leak across contexts

    Mattermost Mobile Apps versions <=2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions.

    Mattermost Mattermost