CWE-456 — Missing Initialization of a Variable
CWE-456: Missing Initialization of a Variable
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Variant |
| Status | Draft |
| Likelihood of exploit | — |
Description
The product does not initialize critical variables, which causes the execution environment to use unexpected values.
Common consequences
- Integrity, Other: Unexpected State, Quality Degradation, Varies by Context
Mitigations
Implementation — Ensure that critical variables are initialized before first use [REF-1485].
Requirements — Choose a language that is not susceptible to these issues.
References
- CWE page: https://cwe.mitre.org/data/definitions/456.html
- CWE list: https://cwe.mitre.org/data/index.html
See all 1,245 pages under Weakness classes (CWE) →
Related pages
Browse by topic
Every page in the corpus, grouped. Search finds one page; this shows what else is here.