Skip to content
Log inStart free trial

CWE-456: Missing Initialization of a Variable

Variant

The product does not initialize critical variables, which causes the execution environment to use unexpected values.

Consequences

  • Integrity, Other: Unexpected State, Quality Degradation, Varies by Context

How to prevent it

  • Implementation: Ensure that critical variables are initialized before first use [REF-1485].
  • Requirements: Choose a language that is not susceptible to these issues.

Recent advisories

  • CVE-2026-46300 — net: skbuff: preserve shared-frag marker during coalescing

All advisories for CWE-456

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor