CWE-1419

Incorrect Initialization of Resource

High

Description

The product attempts to initialize a resource but does not correctly do so, which might leave the resource in an unexpected, incorrect, or insecure state when it is accessed.

Potential Impact

How to Fix

Implementation

Choose the safest-possible initialization for security-related resources.

Implementation

Ensure that each resource (whether variable, memory buffer, register, etc.) is fully initialized.

Implementation

Pay close attention to complex conditionals or reset sources that affect initialization, since some paths might not perform the initialization.

Architecture and Design

Ensure that the design and architecture clearly identify what the initialization should be, and that the initialization does not have security implications.

Detection Methods

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-1419 vulnerabilities in your codebase.

Get Security Assessment