Weaknesses of type CWE-665

153 results

Inicialização incorreta ou ausente de recurso

Ocorre quando um recurso (variável, estrutura, arquivo, conexão) não é inicializado ou recebe um valor inicial incorreto antes do uso. O código acessa ou manipula o recurso em um estado indefinido, levando a comportamentos imprevisíveis, corrupção de dados ou falhas de segurança.

Example

Um buffer alocado dinamicamente que nunca recebe um valor inicial é processado como se contivesse dados válidos; ou um ponteiro não é definido como NULL antes de ser verificado, causando derreferenciação de endereço inválido. Em contexto de credenciais: uma struct de sessão alocada mas não zerada retém dados de uma sessão anterior.

How to mitigate

Sempre inicializar recursos explicitamente no ponto de declaração ou alocação (ex: `int var = 0;`, `memset(struct, 0, sizeof(struct))`, construtores em C++). Use linters e análise estática para detectar variáveis não inicializadas antes do uso.

CVE-2021-33634MEDIUMMalicious image running containers may cause DoS attacksEPSS 0.2%CVE-2023-36490MEDIUMImproper initialization in some Intel(R) MAS software before version 2.3 may allow an authenticated user to potentially enable denial of serEPSS 0.2%CVE-2022-24378MEDIUMImproper initialization in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user to potentially enablEPSS 0.2%CVE-2023-22356MEDIUMImproper initialization in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via locaEPSS 0.2%CVE-2023-5370—arm64 boot CPUs may lack speculative execution protectionsEPSS 0.2%CVE-2023-22444MEDIUMImproper initialization in some Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Extreme Kit, Intel(R) NUC 11 Performance Kit, IntelEPSS 0.2%CVE-2022-46301LOWImproper Initialization for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access.EPSS 0.2%CVE-2024-21807CRITICALImproper initialization in the Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may EPSS 0.2%CVE-2024-25563MEDIUMImproper initialization in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi before version 23.40 may allow EPSS 0.2%CVE-2020-8918MEDIUMTPM 1.2 key authorization values are vulnerable to a TPM transport eavesdropperEPSS 0.2%CVE-2022-38083MEDIUMImproper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information discEPSS 0.2%CVE-2023-48361MEDIUMImproper initialization in firmware for some Intel(R) CSME may allow a privileged user to potentially enable information disclosure via locaEPSS 0.2%CVE-2021-22283MEDIUMMMS File Transfer Vulnerability impact on Distribution Automation productsEPSS 0.2%CVE-2022-31477MEDIUMImproper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via locEPSS 0.2%CVE-2023-32467MEDIUMDell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with higEPSS 0.2%CVE-2022-37334HIGHImproper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may aEPSS 0.2%CVE-2023-40596HIGHSplunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLLEPSS 0.2%CVE-2026-34553MEDIUMiccDEV: DoS in CIccCLUT::Iterate() & CIccMBB::Describe()EPSS 0.2%CVE-2023-27887MEDIUMImproper initialization in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable information disclosure viaEPSS 0.2%CVE-2023-31926HIGHArbitrary File Overwrite using less commandEPSS 0.2%