CWE-456

Missing Initialization of a Variable

Medium

Description

The product does not initialize critical variables, which causes the execution environment to use unexpected values.

Potential Impact

Integrity: Unexpected State

How to Fix

Implementation

Ensure that critical variables are initialized before first use [REF-1485].

Requirements

Choose a language that is not susceptible to these issues.

Detection Methods

Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without havin...

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-456 vulnerabilities in your codebase.

Get Security Assessment