DerScanner
Home / Vulnerability Database / C or C++ : Uninitialized variable
C/C++

C or C++ : Uninitialized variable

Classification

CWE
CWE-457

Overview

An uninitialized variable is used, which causes undefined behavior of the application or points out typos.

In some cases, default value is assigned to a variable which is not initialized propely. This may affect application security depending on the program logic.

References

  1. CWE-457: Use of Uninitialized Variable
MEDIUM

DerScanner Severity Score

Do you want to fix C or C++ : Uninitialized variable in your application?

See also

C/C++

C or C++ : Dead store

C/C++

C or C++ : Use after free

C/C++

C or C++ : va_list uninitialized