CWE-908Use of Uninitialized Resource

Description

Common consequences· 2

• Confidentiality — Read Memory, Read Application Data
  When reusing a resource such as memory or a program variable, the original contents of that resource may not be cleared before it is sent to an untrusted party.
• Availability — DoS: Crash, Exit, or Restart
  The uninitialized resource may contain values that cause program flow to change in ways that the programmer did not intend.

Potential mitigations· 4

• [Implementation]Explicitly initialize the resource before use. If this is performed through an API function or standard procedure, follow all required steps.
• [Implementation]Pay close attention to complex conditionals that affect initialization, since some branches might not perform the initialization.
• [Implementation]Avoid race conditions (CWE-362) during initialization routines.
• [Build and Compilation]Run or compile the product with settings that generate warnings about uninitialized variables or data.

(incoming)15

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.