CWE-457: Use of Uninitialized Variable
The code uses a variable that has not been initialized, leading to unpredictable or unintended results.
A kind of CWE-908 Use of Uninitialized Resource.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 moreceph: add a bunch of missing ceph_path_info initializers7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moremm/page_alloc: clear page->private in free_pages_prepare()7.8 High
- google chromeUninitialized Use in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote...5.3 Medium
- google chromeUninitialized Use in WebCodecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker...6.5 Medium
- google chromeUninitialized Use in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who...4.3 Medium
- google chromeUninitialized Use in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who...5.3 Medium
- google chromeUninitialized Use in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to...6.5 Medium
- linux, linux kernel +1 morexfrm6: fix uninitialized saddr in xfrm6_get_saddr()8.6 High
- linux, linux kernel +1 morescsi: target: file: Use kzalloc_flex for aio_cmd7.5 High
- linux, linux kernel +1 morenetfs: Fix read abandonment during retry8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreUninitialized memory in the Audio/Video: Web Codecs component7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreUninitialized memory in the Audio/Video: Web Codecs component9.8 Critical
- google chromeUninitialized Use in Accessibility in Google Chrome on Windows prior to 147.0.7727.101 allowed a...8.3 High
- google chromeUninitialized Use in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker...6.5 Medium
- emqx nanomqnanomq: Heap-Buffer-Overflow in webhook_inproc.c via cJSON_Parse OOB Read4.9 Medium
- opensc, red hat enterprise linux 10, enterprise linux 7 +2 more +4 moreLibopensc: opensc: multiple uses of uninitialized variable5.7 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrm/vmwgfx: Return the correct value in vmw_translate_ptr functions7.8 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreStack memory disclosure in filemd5 command7.1 High
- cisco nx-os softwareCisco Nexus 3600-R and 9500-R Series Switching Platforms Layer 2 Loop Denial of Service Vulnerability7.4 High
- mozilla firefox, thunderbird +1 moreUninitialized memory in the Graphics: Text component9.1 Critical
- 3ds solidworks edrawingsUse of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 20267.8 High
- linux, linux kernel +1 moreiommu/sva: invalidate stale IOTLB entries for kernel address space8.8 High
- qnap qts, quts hero +1 moreQTS, QuTS hero1.2 Low
- amd epyc™ 9005 series processors, epyc™ embedded 9005 series processors +1 moreImproper Initialization within the AMD Secure Encrypted Virtualization (SEV) firmware can allow...5.9 Medium
- No product listedUse of uninitialized variable for some TDX Module before version tdx1.5 within Ring 0: Hypervisor...5.6 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()7.5 High
- linux, linux kernel +1 moredrm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer7.8 High
- linux, linux kernel +1 moreRDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly5.5 Medium
- color iccdeviccDEV has Type Confusion in CIccTagXmlTagData::ToXml()6.3 Medium
- cmu panda3dPanda3D <= 1.10.16 Deploy-Stub Stack Exhaustion via Unbounded alloca()6.9 Medium
- qualcomm aqt1000 firmware, ar8035 firmware, csra6620 firmware +202 more +204 moreUse of Uninitialized Variable in HLOS7.8 High
- google android, mediatek, inc. mediatek chipset +1 moreIn display, there is a possible memory corruption due to uninitialized data. This could lead to...6.7 Medium
- open design alliance oda drawings sdk - all versions < 2026.12A Use of Uninitialized Variable vulnerability exists in Open Design Alliance Drawings SDK static...7.0 High
- aqara camera hub g3 firmware, hub m2 firmware, hub m3 firmware +2 moreMultiple vulnerabilities in Aqara Hub firmware update process in the Camera Hub G3 4.1.9_0027,...8.1 High
- google android, mediatek, inc. mt2718, mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6897, mt6899, mt6983, mt6985, mt6989, mt6991, mt8196, mt8676, mt8678, mt8792, mt8793 +1 moreIn display, there is a possible escalation of privilege due to improper input validation. This...6.7 Medium
- google android, mediatek, inc. mt2718, mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6897, mt6899, mt6983, mt6985, mt6989, mt6991, mt8196, mt8676, mt8678, mt8792, mt8793 +1 moreIn display, there is a possible memory corruption due to improper input validation. This could...7.8 High
- google androidIn trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible memory corruption due to...7.8 High
- academysoftwarefoundation openexrOpenEXR Makes Use of Uninitialized Memory2.0 Low
- f5 big-ip, big-ip next cnf, big-ip next for kubernetes +22 more +24 moreBIG-IP IPSec vulnerability8.7 High
- ashlar cobaltAshlar-Vellum Cobalt AR File Parsing Uninitialized Variable Remote Code Execution Vulnerability7.8 High
- ashlar graphiteAshlar-Vellum Graphite VC6 File Parsing Uninitialized Variable Remote Code Execution Vulnerability7.8 High
- ashlar graphiteAshlar-Vellum Graphite VC6 File Parsing Uninitialized Variable Remote Code Execution Vulnerability7.8 High
- dragonflyoss dragonflyDragonfly incorrectly handles a task structure’s usedTraffic field5.5 Medium
- dassault systèmes solidworks edrawingsUse of Uninitialized Variable vulnerability affecting the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 20257.8 High
- amd instinct™ mi210, instinct™ mi250, radeon™ pro v710 graphics products +12 more +14 moreUse of an uninitialized variable in the ASP could allow an attacker to access leftover data from...2.8 Low
- mozilla firefox, thunderbird +1 moreUninitialized memory in the JavaScript Engine component6.5 Medium
- autodesk autocad, advance steel, autocad architecture +7 more +9 moreDGN File Parsing Uninitialized Variable Vulnerability7.8 High
- uclouvain openjpegOpenJPEG allows OOB heap memory write in opj_jp2_read_header6.6 Medium
- mozilla firefox, thunderbird +1 moreJavaScript engine only wrote partial return value to stack6.5 Medium
- opencvOpenCV contains a use after free buffer write due to an uninitialized pointer6.6 Medium
- Show moreLoading…