Common Weakness Enumeration

    CWE Definition / CWE-456

    CWE-456: Missing Initialization of a Variable

    The product does not initialize critical variables, which causes the execution environment to use unexpected values.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-909: Missing Initialization of Resource

    CWE-665: Improper Initialization

    CWE-665: Improper Initialization

    CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

    CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

    CWE-98: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

    CWE-457: Use of Uninitialized Variable