Weaknesses of type CWE-665

166 results

Inicialização incorreta ou ausente de recurso

Ocorre quando um recurso (variável, estrutura, arquivo, conexão) não é inicializado ou recebe um valor inicial incorreto antes do uso. O código acessa ou manipula o recurso em um estado indefinido, levando a comportamentos imprevisíveis, corrupção de dados ou falhas de segurança.

Example

Um buffer alocado dinamicamente que nunca recebe um valor inicial é processado como se contivesse dados válidos; ou um ponteiro não é definido como NULL antes de ser verificado, causando derreferenciação de endereço inválido. Em contexto de credenciais: uma struct de sessão alocada mas não zerada retém dados de uma sessão anterior.

How to mitigate

Sempre inicializar recursos explicitamente no ponto de declaração ou alocação (ex: `int var = 0;`, `memset(struct, 0, sizeof(struct))`, construtores em C++). Use linters e análise estática para detectar variáveis não inicializadas antes do uso.

CVE-2022-37334HIGHImproper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may aEPSS 0.2%CVE-2022-38083MEDIUMImproper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information discEPSS 0.2%CVE-2023-48361MEDIUMImproper initialization in firmware for some Intel(R) CSME may allow a privileged user to potentially enable information disclosure via locaEPSS 0.2%CVE-2021-22283MEDIUMMMS File Transfer Vulnerability impact on Distribution Automation productsEPSS 0.2%CVE-2023-32467MEDIUMDell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with higEPSS 0.2%CVE-2022-31477MEDIUMImproper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via locEPSS 0.2%CVE-2026-31693HIGHcifs: some missing initializations on replayEPSS 0.2%CVE-2023-40596HIGHSplunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLLEPSS 0.2%CVE-2026-34553MEDIUMiccDEV: DoS in CIccCLUT::Iterate() & CIccMBB::Describe()EPSS 0.2%CVE-2024-36331LOWImproper initialization of CPU cache memory could allow a privileged attacker with hypervisor access to overwrite SEV-SNP guest memory resulEPSS 0.2%CVE-2026-20734MEDIUMImproper initialization in some firmware for some Intel(R) Active Management Technology (Intel(R) AMT), and some Intel(R) Standard ManageabiEPSS 0.2%CVE-2026-93495HIGHImproper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a EPSS 0.2%CVE-2025-21100MEDIUMImproper initialization in the UEFI firmware for the Intel(R) Server D50DNP and M50FCP boards may allow a privileged user to potentially enaEPSS 0.2%CVE-2023-27887MEDIUMImproper initialization in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable information disclosure viaEPSS 0.2%CVE-2023-31926HIGHArbitrary File Overwrite using less commandEPSS 0.2%CVE-2026-0940HIGHA potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that could allow a local privileged user to modEPSS 0.1%CVE-2025-24511LOWImproper initialization in the Linux kernel-mode driver for some Intel(R) I350 Series Ethernet before version 5.19.2 may allow an authenticaEPSS 0.1%CVE-2026-23553LOWx86: incomplete IBPB for vCPU isolationEPSS 0.1%CVE-2026-23253HIGHmedia: dvb-core: fix wrong reinitialization of ringbuffer on reopenEPSS 0.1%CVE-2026-12539MEDIUMDocker Sandboxes ICMP egress restriction bypass after daemon restartEPSS 0.1%