1093
Observed Examples
Reference Description
CVE-2020-6078 Chain: The return value of a function returning a pointer is not checked for
success (CWE-252) resulting in the later use of an uninitialized variable
(CWE-456) and a null pointer dereference (CWE-476)
https://www.cve.org/CVERecord?id=CVE-2020-6078
CVE-2009-2692 Chain: Use of an unimplemented network socket operation pointing to an
uninitialized handler function (CWE-456) causes a crash because of a null
pointer dereference (CWE-476).
https://www.cve.org/CVERecord?id=CVE-2009-2692
CVE-2020-20739 A variable that has its value set in a conditional statement is sometimes used
when the conditional fails, sometimes causing data leakage
https://www.cve.org/CVERecord?id=CVE-2020-20739
CVE-2005-2978 Product uses uninitialized variables for size and index, leading to resultant
buffer overflow.
https://www.cve.org/CVERecord?id=CVE-2005-2978
CVE-2005-2109 Internal variable in PHP application is not initialized, allowing external
modification.
https://www.cve.org/CVERecord?id=CVE-2005-2109
CVE-2005-2193 Array variable not initialized in PHP application, leading to resultant SQL
injection.
https://www.cve.org/CVERecord?id=CVE-2005-2193
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 808 2010 Top 25 - Weaknesses On the Cusp 800 2355
MemberOf 867 2011 Top 25 - Weaknesses On the Cusp 900 2372
MemberOf 884 CWE Cross-section 884 2567
MemberOf 998 SFP Secondary Cluster: Glitch in Computation 888 2419
MemberOf 1129 CISQ Quality Measures (2016) - Reliability 1128 2440
MemberOf 1131 CISQ Quality Measures (2016) - Security 1128 2442
MemberOf 1167 SEI CERT C Coding Standard - Guidelines 12. Error
Handling (ERR)
1154 2461
MemberOf 1180 SEI CERT Perl Coding Standard - Guidelines 02.
Declarations and Initialization (DCL)
1178 2465
MemberOf 1416 Comprehensive Categorization: Resource Lifecycle
Management
1400 2545
Notes
Relationship
This weakness is a major factor in a number of resultant weaknesses, especially in web
applications that allow global variable initialization (such as PHP) with libraries that can be
directly requested.
Research Gap
It is highly likely that a large number of resultant weaknesses have missing initialization as a
primary factor, but researcher reports generally do not provide this level of detail.
Taxonomy Mappings
CWE Version 4.14
CWE-457: Use of Uninitialized Variable
CWE-457: Use of Uninitialized Variable