CWE-457: Use of Uninitialized Variable
The code uses a variable that has not been initialized, leading to unpredictable or unintended results.
A kind of CWE-908 Use of Uninitialized Resource.
From the CWE List. © The MITRE Corporation.
Newest
- dassault systèmes solidworks edrawingsUse of Uninitialized Variable vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 20257.8 High
- honeywell c300 pcnt02, classic enim, ehb +7 more +9 moreDereferencing of an uninitialized pointer leads to denial of service.7.5 High
- cisco meraki mx firmwareCisco Meraki MX and Z Series AnyConnect VPN with Client Certificate Authentication Denial of Service Vulnerability8.6 High
- citrix netscaler gateway, netscaler adc, gateway +2 more +4 moreNetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread9.3 Critical
- johnson controls istar configuration utility (icu)The iSTAR Configuration Utility (ICU) tool leaks memory, which could result in the unintended...6.3 Medium
- wolfbox level 2 ev charger, level 2 ev charger firmware +1 moreWOLFBOX Level 2 EV Charger BLE Encryption Keys Uninitialized Variable Authentication Bypass Vulnerability6.3 Medium
- google androidIn writeToParcel of CursorWindow.cpp, there is a possible out of bounds read due to uninitialized...5.5 Medium
- siemens scalance lpe9403, scalance lpe9403 firmware +1 moreA vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions)....5.3 Medium
- rockwell automation arena®, rockwellautomation arena +1 moreLocal Code Execution Vulnerability in Arena®8.5 High
- rockwell automation arena®, rockwellautomation arena +1 moreLocal Code Execution Vulnerability in Arena®8.5 High
- rockwell automation arena®, rockwellautomation arena +1 moreLocal Code Execution Vulnerability in Arena®8.5 High
- cisco meraki mx firmwareA vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series...7.7 High
- autodesk autocad, advance steel, autocad architecture +6 more +8 moreCATPRODUCT File Parsing Uninitialized Variable Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +6 more +8 moreCATPRODUCT File Parsing Uninitialized Variable Vulnerability7.8 High
- autodesk autocad, advance steel, autocad architecture +6 more +8 moreCATPRODUCT File Parsing Uninitialized Variable Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt VS File Parsing Use of Uninitialized Variable Remote Code Execution Vulnerability7.8 High
- trimble sketchupTrimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability7.8 High
- google androidIn dng_lossless_decoder::HuffDecode of dng_lossless_jpeg.cpp, there is a possible way to cause a...7.5 High
- google android, mediatek, inc. mt6739, mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6873, mt6877, mt6885, mt6893, mt8167, mt8167s, mt8175, mt8185, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8395, mt8666, mt8667, mt8673, mt8675, mt8678, mt8765, mt8766, mt8768, mt8771, mt8775, mt8781, mt8786, mt8788, mt8789, mt8791t, mt8795t, mt8797, mt8798, mt8893 +1 moreIn DA, there is a possible read of uninitialized heap data due to uninitialized data. This could...4.3 Medium
- huawei harmonyosVulnerability of variables not being initialized in the notification module Impact: Successful...4.0 Medium
- gstreamerGHSL-2024-197: GStreamer uses uninitialized stack memory in Matroska/WebM demuxer8.6 High
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability7.8 High
- trimble sketchup viewerTrimble SketchUp Viewer SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability7.8 High
- dassault edrawingsHeap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 20257.8 High
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +2 moreCisco Adaptive Security Appliance Software SSL/TLS Denial of Service Vulnerability8.6 High
- openbsdOpenBSD NFS double-free vulnerability9.2 Critical
- delta electronics cncsoft-g2Use of Uninitialized Variable vulnerability in Delta Electronics CNCSoft-G28.4 High
- red hat nbde tang server, openshift developer tools and services, openshift pipelines +34 more +36 moreGolang-fips: golang fips zeroed buffer6.5 Medium
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc3.9 Low
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init3.9 Low
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc3.9 Low
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init3.9 Low
- xpdfUninitialized variable in Xpdf 4.05 due to invalid JPEG header2.1 Low
- ofonooFono AT CMGR Command Uninitialized Variable Information Disclosure Vulnerability3.3 Low
- ofonooFono AT CMT Command Uninitialized Variable Information Disclosure Vulnerability3.3 Low
- ofonooFono AT CMGL Command Uninitialized Variable Information Disclosure Vulnerability3.3 Low
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +136 more +138 moreUse of Uninitialized Variable in Automotive GPU8.4 High
- google chromeUninitialized Use in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote...8.8 High
- autodesk autocad, advance steel, autocad architecture +6 more +8 moreMultiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products7.8 High
- autodesk autocad, advance steel, autocad architecture +6 more +8 moreMultiple Vulnerabilities in the Autodesk AutoCAD Desktop Software7.8 High
github.com/k8sgpt-ai/k8sgptGoVulnerabilities with the k8sGPTNo score- throughtek kalay sdk, owletcare cam 2 firmware, cam firmware +3 more +5 moreThroughTek Kalay SDK error in handling the PSK identity8.1 High
- hdfgroup hdf5, hdf5library +1 moreHDF5 Library through 1.14.3 may use an uninitialized value in H5A__attr_release_table in H5Aint.c.9.8 Critical
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader Annotation Use of Uninitialized Variable Remote Code Execution Vulnerability7.8 High
- foxit pdf reader, pdf editor, phantompdf +2 moreFoxit PDF Reader Annotation Use of Uninitialized Variable Information Disclosure Vulnerability3.3 Low
- trimble sketchup viewerTrimble SketchUp Viewer SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor J2K File Parsing Uninitialized Variable Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor U3D File Parsing Uninitialized Variable Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor U3D File Parsing Uninitialized Variable Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pro, pdf-tools +2 morePDF-XChange Editor J2K File Parsing Uninitialized Variable Information Disclosure Vulnerability3.3 Low
- Show moreLoading…