CWE-456—Missing Initialization of a Variable

名称

Missing Initialization of a Variable

描述

The product does not initialize critical variables, which causes the execution environment to use unexpected values.

常见后果

范围：

Integrity, Other

影响：

Unexpected State, Quality Degradation, Varies by Context

注释：

The uninitialized data may be invalid, causing logic errors within the program. In some cases, this could result in a security problem.

相关 CWE

• CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')High
• CWE-98Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')High
• CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')High
• CWE-457Use of Uninitialized VariableHigh
• CWE-665Improper InitializationMedium
• CWE-909Missing Initialization of ResourceMedium