Weaknesses of type CWE-665

166 results

Inicialização incorreta ou ausente de recurso

Ocorre quando um recurso (variável, estrutura, arquivo, conexão) não é inicializado ou recebe um valor inicial incorreto antes do uso. O código acessa ou manipula o recurso em um estado indefinido, levando a comportamentos imprevisíveis, corrupção de dados ou falhas de segurança.

Example

Um buffer alocado dinamicamente que nunca recebe um valor inicial é processado como se contivesse dados válidos; ou um ponteiro não é definido como NULL antes de ser verificado, causando derreferenciação de endereço inválido. Em contexto de credenciais: uma struct de sessão alocada mas não zerada retém dados de uma sessão anterior.

How to mitigate

Sempre inicializar recursos explicitamente no ponto de declaração ou alocação (ex: `int var = 0;`, `memset(struct, 0, sizeof(struct))`, construtores em C++). Use linters e análise estática para detectar variáveis não inicializadas antes do uso.

CVE-2021-33638HIGHRun copy with container in a malicious directory may cause container escapingEPSS 0.2%CVE-2021-33637HIGHExport container in a malicious directory may cause process to be hijackedEPSS 0.2%CVE-2025-25947MEDIUMAn issue in Bento4 v1.6.0-641 allows an attacker to trigger a segmentation fault via Ap4Atom.cpp, specifically in AP4_AtomParent::RemoveChilEPSS 0.2%CVE-2021-33634MEDIUMMalicious image running containers may cause DoS attacksEPSS 0.2%CVE-2026-44434MEDIUMQuicly is vulnerable to stateless reset injectionEPSS 0.2%CVE-2026-107175MEDIUMMISP Correlation Engine Fails to Refresh When Event Distribution or Sharing Group ChangesEPSS 0.2%CVE-2023-27306MEDIUMImproper Initialization in firmware for some Intel(R) Optane(TM) SSD products may allow an authenticated user to potentially enable denial oEPSS 0.2%CVE-2021-29611LOWIncomplete validation in `SparseReshape`EPSS 0.2%CVE-2023-5370—arm64 boot CPUs may lack speculative execution protectionsEPSS 0.2%CVE-2021-29610LOWInvalid validation in `QuantizeAndDequantizeV2`EPSS 0.2%CVE-2023-28737HIGHImproper initialization in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable escalEPSS 0.2%CVE-2023-36490MEDIUMImproper initialization in some Intel(R) MAS software before version 2.3 may allow an authenticated user to potentially enable denial of serEPSS 0.2%CVE-2022-24378MEDIUMImproper initialization in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user to potentially enablEPSS 0.2%CVE-2023-22444MEDIUMImproper initialization in some Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Extreme Kit, Intel(R) NUC 11 Performance Kit, IntelEPSS 0.2%CVE-2023-22356MEDIUMImproper initialization in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via locaEPSS 0.2%CVE-2022-46301LOWImproper Initialization for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access.EPSS 0.2%CVE-2024-21807CRITICALImproper initialization in the Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may EPSS 0.2%CVE-2024-25563MEDIUMImproper initialization in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi before version 23.40 may allow EPSS 0.2%CVE-2020-8918MEDIUMTPM 1.2 key authorization values are vulnerable to a TPM transport eavesdropperEPSS 0.2%CVE-2026-68461HIGHdevice property: initialize the remaining fields of fwnode_handle in fwnode_init()EPSS 0.2%