1461
Reference Description
CVE-2008-5021 Composite: race condition allows attacker to modify an object while it is still
being initialized, causing software to access uninitialized memory.
https://www.cve.org/CVERecord?id=CVE-2008-5021
CVE-2005-1036 Chain: Bypass of access restrictions due to improper authorization (CWE-862)
of a user results from an improperly initialized (CWE-909) I/O permission
bitmap
https://www.cve.org/CVERecord?id=CVE-2005-1036
CVE-2008-3597 chain: game server can access player data structures before initialization has
happened leading to NULL dereference
https://www.cve.org/CVERecord?id=CVE-2008-3597
CVE-2009-2692 chain: uninitialized function pointers can be dereferenced allowing code
execution
https://www.cve.org/CVERecord?id=CVE-2009-2692
CVE-2009-0949 chain: improper initialization of memory can lead to NULL dereference
https://www.cve.org/CVERecord?id=CVE-2009-0949
CVE-2009-3620 chain: some unprivileged ioctls do not verify that a structure has been
initialized before invocation, leading to NULL dereference
https://www.cve.org/CVERecord?id=CVE-2009-3620
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 740 CERT C Secure Coding Standard (2008) Chapter 7 -
Arrays (ARR)
734 2344
MemberOf 742 CERT C Secure Coding Standard (2008) Chapter 9 -
Memory Management (MEM)
734 2345
MemberOf 752 2009 Top 25 - Risky Resource Management 750 2353
MemberOf 846 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 3 - Declarations and Initialization (DCL)
844 2362
MemberOf 874 CERT C++ Secure Coding Section 06 - Arrays and the
STL (ARR)
868 2375
MemberOf 876 CERT C++ Secure Coding Section 08 - Memory
Management (MEM)
868 2376
MemberOf 962 SFP Secondary Cluster: Unchecked Status Condition 888 2400
MemberOf 1003 Weaknesses for Simplified Mapping of Published
Vulnerabilities
1003 2576
MemberOf 1135 SEI CERT Oracle Secure Coding Standard for Java -
Guidelines 01. Declarations and Initialization (DCL)
1133 2444
MemberOf 1306 CISQ Quality Measures - Reliability 1305 2483
MemberOf 1308 CISQ Quality Measures - Security 1305 2485
MemberOf 1340 CISQ Data Protection Measures 1340 2590
MemberOf 1416 Comprehensive Categorization: Resource Lifecycle
Management
1400 2545
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Incorrect initialization
CERT C Secure Coding ARR02-
C
Explicitly specify array bounds, even if
implicitly defined by an initializer
CWE Version 4.14
CWE-666: Operation on Resource in Wrong Phase of Lifetime
CWE-666: Operation on Resource in Wrong Phase of Lifetime