CWE-457: Use of Uninitialized Variable
The code uses a variable that has not been initialized, leading to unpredictable or unintended results.
A kind of CWE-908 Use of Uninitialized Resource.
From the CWE List. © The MITRE Corporation.
Newest
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor J2K File Parsing Uninitialized Variable Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pro, pdf-tools +2 morePDF-XChange Editor PDF File Parsing Uninitialized Variable Information Disclosure Vulnerability3.3 Low
- kofax power pdfKofax Power PDF printf Uninitialized Variable Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt Uninitialized Memory Remote Code Execution Vulnerability7.8 High
- lief-project liefLIEF obtain sensitive information via the name parameter3.9 Low
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()7.3 High
- asr falcon/crane, asrmicro asr1602 firmware, asr1603 firmware +11 more +13 moreUninitialized scalar field5.8 Medium
- cs technologies australia evolution controller, cs-technologies evolution +1 moreUnsanitised variable on DAL_ADD in Evolution Controller causes application level denial of service and crash7.5 High
- ibm security verify access appliance, security verify access +1 moreIBM Security Verify Access Appliance denial of service6.2 Medium
- google chromeUninitialized Use in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to...4.3 Medium
- dassault systèmes solidworks desktop, 3ds 3dexperience solidworks +1 moreMultiple vulnerabilities exist in file reading procedure in SOLIDWORKS Desktop on Release SOLIDWORKS 20247.8 High
- 3ds edrawings, solidworks +1 moreMultiple vulnerabilities exist in file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 20247.8 High
- antonkueltz fastecdsaUninitialized Variable in fastecdsa7.5 High
- autodesk autocad, advance steel, autocad architecture +9 more +11 moreMultiple Vulnerabilities in the Autodesk AutoCAD Desktop Software7.8 High
- helmHelm's Missing YAML Content Leads To Panic7.5 High
- kingsoft wps office, wps office +1 moreAn uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537...8.8 High
- softether vpnAn information disclosure vulnerability exists in the ClientConnect() functionality of SoftEther...5.3 Medium
- gnu binutils, fedora extra packages for enterprise linux 7, extra packages for enterprise linux 8 +7 more +9 moreLocal variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized4.7 Medium
- qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +203 more +205 moreBuffer copy without checking size of input in Audio.9.8 Critical
- qualcomm mdm8207 firmware, mdm9205 firmware, mdm9206 firmware +10 more +12 moreUse of Uninitialized Variable in MODEM7.5 High
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley microstation, microstation connect, view +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley microstation, microstation connect, view +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- gnu binutils, fedora extra packages for enterprise linux 7, extra packages for enterprise linux 8 +7 more +9 moreField `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`4.7 Medium
- gnu binutils, fedora extra packages for enterprise linux 7, extra packages for enterprise linux 8 +7 more +9 moreField `file_table` of `struct module *module` is uninitialized4.7 Medium
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreThis vulnerability allows local attackers to disclose sensitive information on affected...5.1 Medium
- dell alienware area-51 r4 firmware, alienware area-51 r5 firmware, cpg bios +2 moreDell BIOS contains a use of uninitialized variable vulnerability. A local authenticated malicious...7.5 High
- linux kernelA flaw was found in vDPA with VDUSE backend. There are currently no checks in VDUSE kernel driver...6.5 Medium
- google android, samsung mobile devices +1 moreAn absence of variable initialization in ICCC TA prior to SMR Aug-2022 Release 1 allows local...2.3 Low
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreTMM vulnerability CVE-2022-346557.5 High
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley microstation, microstation connect, view +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley view, microstation, microstation connect +2 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...7.8 High
- bentley microstation, microstation connect, view +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- ti cc3100 firmware, cc3200 firmware, simplelink cc32xx software development kit +2 moreAn information disclosure vulnerability exists in the HTTP Server /ping.html functionality of...5.3 Medium
- reolink rlc-410w firmwareAn out-of-bounds write vulnerability exists in the device TestEmail functionality of reolink RLC...9.1 Critical
- blackmagicdesign davinci resolveWhen parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will...9.8 Critical
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization...5.5 Medium
- zyantific zydisPossible heap buffer overflow when using zycore string functions in formatter hooks5.9 Medium
- vim, vim vim/vim, debian linux +1 more +3 moreUse of Uninitialized Variable in vim/vim7.3 High
- foxit studio photo, foxitsoftware foxit studio photo +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- wavpack, canonical ubuntu linux, debian linux +1 more +3 moreWavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is:...5.5 Medium
- wavpack, canonical ubuntu linux, debian linux +1 more +3 moreWavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is:...5.5 Medium
- libgd, php, canonical ubuntu linux +10 more +12 moreUninitialized read in gdImageCreateFromXbm3.1 Low
- servo smallvecUse of Uninitialized Resource in smallvec7.5 High
- openbsd opensshThe key_certify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy...5.0 Medium
- microsoft visual studio, visual studio .net, visual c\+\+ +2 moreThe Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005...9.3 High