Fallos del tipo CWE-665

166 resultados

Inicialização incorreta ou ausente de recursos

Ocorre quando um recurso (variável, buffer, conexão, arquivo) não é inicializado ou é inicializado de forma incompleta antes do uso, deixando-o em estado indeterminado. Isso pode levar a comportamentos imprevisíveis, vazamento de dados sensíveis ou crashes, pois o código tenta usar valores aleatórios ou valores de memória anterior.

Ejemplo

Um desenvolvedor declara um buffer para armazenar credenciais, mas esquece de zerar sua memória antes de preenchê-lo; se o código ler dessa memória antes de atribuir um valor válido, pode expor dados de sessões anteriores. Ou uma variável booleana que controla acesso é usada sem ser definida, assumindo um valor aleatório de memória.

Cómo mitigar

Sempre inicialize explicitamente recursos no ponto de declaração ou antes do primeiro uso: atribua valores padrão seguros, use construtores ou funções de setup específicas. Ferramentas de análise estática (lint, SAST) e testes com sanitizers de memória ajudam a detectar usos sem inicialização.

CVE-2023-48361MEDIUMImproper initialization in firmware for some Intel(R) CSME may allow a privileged user to potentially enable information disclosure via locaEPSS 0.2%CVE-2022-38083MEDIUMImproper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information discEPSS 0.2%CVE-2021-22283MEDIUMMMS File Transfer Vulnerability impact on Distribution Automation productsEPSS 0.2%CVE-2022-37334HIGHImproper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may aEPSS 0.2%CVE-2023-32467MEDIUMDell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with higEPSS 0.2%CVE-2026-31693HIGHcifs: some missing initializations on replayEPSS 0.2%CVE-2022-31477MEDIUMImproper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via locEPSS 0.2%CVE-2023-40596HIGHSplunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLLEPSS 0.2%CVE-2026-34553MEDIUMiccDEV: DoS in CIccCLUT::Iterate() & CIccMBB::Describe()EPSS 0.2%CVE-2024-36331LOWImproper initialization of CPU cache memory could allow a privileged attacker with hypervisor access to overwrite SEV-SNP guest memory resulEPSS 0.2%CVE-2026-20734MEDIUMImproper initialization in some firmware for some Intel(R) Active Management Technology (Intel(R) AMT), and some Intel(R) Standard ManageabiEPSS 0.2%CVE-2026-93495HIGHImproper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a EPSS 0.2%CVE-2025-21100MEDIUMImproper initialization in the UEFI firmware for the Intel(R) Server D50DNP and M50FCP boards may allow a privileged user to potentially enaEPSS 0.2%CVE-2023-27887MEDIUMImproper initialization in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable information disclosure viaEPSS 0.2%CVE-2023-31926HIGHArbitrary File Overwrite using less commandEPSS 0.2%CVE-2026-0940HIGHA potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that could allow a local privileged user to modEPSS 0.1%CVE-2025-24511LOWImproper initialization in the Linux kernel-mode driver for some Intel(R) I350 Series Ethernet before version 5.19.2 may allow an authenticaEPSS 0.1%CVE-2026-23553LOWx86: incomplete IBPB for vCPU isolationEPSS 0.1%CVE-2026-23253HIGHmedia: dvb-core: fix wrong reinitialization of ringbuffer on reopenEPSS 0.1%CVE-2026-12539MEDIUMDocker Sandboxes ICMP egress restriction bypass after daemon restartEPSS 0.1%