Class weakness
Incomplete
CWE-909: Missing Initialization of Resource
The product does not initialize a critical resource.
14
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
Medium
Likelihood of exploit
Per MITRE
Class
Abstraction
MITRE classification
Overview
Many resources require initialization before they can be properly used. If a resource is not initialized, it could contain unpredictable or expired data, or it could be initialized to defaults that are invalid. This can have security implications when the resource is expected to have certain properties or values.