Weaknesses of type CWE-665

166 results

Inicialização incorreta ou ausente de recurso

Ocorre quando um recurso (variável, estrutura, arquivo, conexão) não é inicializado ou recebe um valor inicial incorreto antes do uso. O código acessa ou manipula o recurso em um estado indefinido, levando a comportamentos imprevisíveis, corrupção de dados ou falhas de segurança.

Example

Um buffer alocado dinamicamente que nunca recebe um valor inicial é processado como se contivesse dados válidos; ou um ponteiro não é definido como NULL antes de ser verificado, causando derreferenciação de endereço inválido. Em contexto de credenciais: uma struct de sessão alocada mas não zerada retém dados de uma sessão anterior.

How to mitigate

Sempre inicializar recursos explicitamente no ponto de declaração ou alocação (ex: `int var = 0;`, `memset(struct, 0, sizeof(struct))`, construtores em C++). Use linters e análise estática para detectar variáveis não inicializadas antes do uso.

CVE-2026-116115LOWYoosee GM8135S Camera WiFi Configuration wpa_supplicantX.conf initializationEPSS 0.3%CVE-2021-26326—Failure to validate VM_HSAVE_PA during SNP_INIT may result in a loss of memory integrity.EPSS 0.3%CVE-2025-2149LOWPyTorch Quantized Sigmoid Module nnq_Sigmoid initializationEPSS 0.3%CVE-2026-62433HIGHcorrect buffer checks for DM_OP hypercallsEPSS 0.3%CVE-2021-33636HIGHLoad malicious images may cause process to be hijackedEPSS 0.3%CVE-2022-32823MEDIUMA memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11EPSS 0.2%CVE-2021-26312—Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory iEPSS 0.2%CVE-2021-29613MEDIUMIncomplete validation in `tf.raw_ops.CTCLoss`EPSS 0.2%CVE-2021-36319LOWDell Networking OS10 versions 10.4.3.x, 10.5.0.x and 10.5.1.x contain an information exposure vulnerability. A low privileged authenticated EPSS 0.2%CVE-2024-31157MEDIUMImproper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors may allow a privileged user to potentially enable iEPSS 0.2%CVE-2024-0089HIGHCVEEPSS 0.2%CVE-2021-29609MEDIUMIncomplete validation in `SparseAdd`EPSS 0.2%CVE-2024-11158HIGHRockwell Automation Arena® Uninitialized VulnerabilityEPSS 0.2%CVE-2023-1513LOWA flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl, on 32-bit systems, there might be some uninitialized portions of the kvm_EPSS 0.2%CVE-2024-26021MEDIUMImproper initialization in the firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentiallyEPSS 0.2%CVE-2020-35508—A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identEPSS 0.2%CVE-2021-29614HIGHInterpreter crash from `tf.io.decode_raw`EPSS 0.2%CVE-2023-45315MEDIUMImproper initialization in some Intel(R) Power Gadget software for Windwos all versions may allow an authenticated user to potentially enablEPSS 0.2%CVE-2022-45109LOWImproper initialization for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via locaEPSS 0.2%CVE-2022-27493HIGHImproper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially eEPSS 0.2%