CWE-457: Use of Uninitialized Variable
The code uses a variable that has not been initialized, leading to unpredictable or unintended results.
A kind of CWE-908 Use of Uninitialized Resource.
From the CWE List. © The MITRE Corporation.
Newest
- networkupstools nut NUT blazer_usb ippon_command stack info-leak via unzeroed char tmp[64] in OUT-direction usb_control_msg 2.4 Low
- bytecodealliance wasm-micro-runtime WebAssembly Micro Runtime: Missing `ref.null` heap-type validation in `load_init_expr` leaks host stack memory to the WebAssembly guest 6.9 Medium
- bitdefender pybddisasm Uninitialized output buffer returned after nd_to_text failure in pybddisasm 6.9 Medium
- bitdefender pybddisasm Uninitialized INSTRUX contents returned after decoding failure in pybddisasm 4.8 Medium
- postgresql psqlodbc psqlODBC ODBC escape parser stack buffer overflow 7.5 High
- ffmpeg FFmpeg 4.4 through 9.0.2 Uninitialized Memory Disclosure via CDXL HAM Decoder 6.8 Medium
- ffmpeg FFmpeg 2.0 through 9.0.2 Information Disclosure via G2M Kempf Palette 6.8 Medium
- mozilla firefox, thunderbird +1 more Uninitialized memory in the Networking component 8.1 High
- mozilla firefox, thunderbird +1 more Uninitialized memory in the Graphics: Canvas2D component 5.4 Medium
- google chrome Memory corruption in Audio in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to... 8.8 High
- google chrome Improper access control in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker... 8.8 High
- google chrome Improper input validation in Media in Google Chrome prior to 156.0.8078.47 allowed a remote... 8.8 High
- google chrome Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to... 8.8 High
- eclipse foundation threadx - netx duo NetX Duo Web HTTP server releases an uninitialized packet pointer on the PUT Content-Length underflow path 8.8 High
- eclipse foundation threadx - guix Binary resource loader: unbounded map_id from a theme file causes a heap out-of-bounds write in the GUIX-allocated arena 6.8 Medium
- mozilla firefox, thunderbird +1 more Uninitialized memory in the Audio/Video: cubeb component 5.4 Medium
- python pillow Pillow: Image.quantize() with empty palette leaks uninitialized stack memory 6.9 Medium
- python pillow Pillow: Invalid free in FreeType glyph rendering when a stroker is active 8.2 High
- google chrome Use of uninitialized variable in ThirdParty lmza_sdk in Google Chrome prior to 155.0.8059.79... 4.3 Medium
-
libsndfileAlpaquita libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variable 5.3 Medium - red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 more M17n-lib: uninitialized stack read in iso-2022 compound text utf-8 decoding 2.5 Low
- apache software foundation thrift Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route 8.7 High
- thales sconnect SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability 9.4 Critical
- google android In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This... 8.8 High
- apcupsd apcupsd through 3.14.14 discloses uninitialized stack memory in getupsvar() in src/cgi/upsfetch.c... 3.7 Low
- eclipse foundation netx duo MQTT WebSocket setter ABI mismatch may disclose memory or cause a crash 7.5 High
- mozilla firefox, thunderbird +1 more Uninitialized memory in the Graphics: WebGPU component 4.3 Medium
- mozilla firefox, thunderbird +1 more Uninitialized memory in the Graphics: WebGPU component 4.3 Medium
- mozilla firefox, thunderbird +1 more Uninitialized memory in the Graphics: WebGPU component 4.3 Medium
- mozilla firefox, thunderbird +1 more Uninitialized memory in the Audio/Video component 4.3 Medium
- mozilla firefox, thunderbird +1 more Uninitialized memory in the Storage: Quota Manager component 8.1 High
- google chrome Use of uninitialized variable in Tint in Google Chrome on on Android prior to 154.0.8037.57... 4.7 Medium
- ibm powervm hypervisor, power system e1050 \(9043-mrx\) firmware, power system e1080 \(9080-hex\) firmware +17 more +19 more This Power System update is being released to address 3.2 Low
- freerdp FreeRDP 2.0.0 through 3.30.0 Uninitialized Heap Memory Disclosure via urbdrc 7.1 High
- openbmc phosphor-net-ipmid OpenBMC IPMI Authentication Bypass via Default userKey and Stale Challenge Value 8.1 High
- mozilla firefox, thunderbird +1 more Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component 8.8 High
- apple ipados, macos, tvos +4 more +6 more A memory initialization issue was addressed with improved memory handling. This issue is fixed in... 5.5 Medium
- apple ipados, macos, tvos +4 more +6 more An uninitialized memory issue was addressed with improved memory initialization. This issue is... 4.3 Medium
- fortinet fortianalyzer A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may... 5.9 Medium
- mozilla thunderbird Uninitialized memory in MIME parsing 9.1 Critical
- google android In multiple functions of physmem_extmem_linux.c, there is a possible out-of-bounds read due to... 6.2 Medium
- google android In multiple locations, there is a possible information disclosure due to uninitialized memory use... 4.4 Medium
- google chrome Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed... 9.6 Critical
- academysoftwarefoundation openexr OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure 4.3 Medium
- wireshark Use of Uninitialized Variable in Wireshark 5.3 Medium
- linux ipvs: reset full ip_vs_seq structs in ip_vs_conn_new 9.8 Critical
- ibm i IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM 5.3 Medium
- No product listed WonderTrader TraderATP Cash Trade Conversion WTSTradeDef.hpp uninitialized variable 5.3 Medium
- google chrome Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who... 3.1 Low
- google chrome Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who... 3.1 Low
- Show olderLoading…