1793
The product uses or accesses a resource that has not been initialized.
Extended Description
When a resource has not been properly initialized, the product may behave unexpectedly. This
may lead to a crash or invalid memory access, but the consequences vary depending on the type
of resource and how it is used within the product.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 665 Improper Initialization 1456
ParentOf 457 Use of Uninitialized Variable 1094
CanFollow 909 Missing Initialization of Resource 1797
Relevant to the view "Weaknesses for Simplified Mapping of Published
Vulnerabilities" (CWE-1003)
Nature Type ID Name Page
ChildOf 665 Improper Initialization 1456
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 399 Resource Management Errors 2324
Weakness Ordinalities
Primary :
Resultant :
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Likelihood Of Exploit
Medium
Common Consequences
Scope Impact Likelihood
Confidentiality Read Memory
Read Application Data
When reusing a resource such as memory or a program
variable, the original contents of that resource may not be
cleared before it is sent to an untrusted party.
Availability DoS: Crash, Exit, or Restart
The uninitialized resource may contain values that cause
program flow to change in ways that the programmer did
not intend.
Potential Mitigations
Phase: Implementation
Explicitly initialize the resource before use. If this is performed through an API function or
standard procedure, follow all required steps.
CWE Version 4.14
CWE-908: Use of Uninitialized Resource
CWE-908: Use of Uninitialized Resource