CWE-824: Access of Uninitialized Pointer
The product accesses or uses a pointer that has not been initialized.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- open-quantum-safe liboqs liboqs: Uninitialized function-pointer dereference in OQS_KEM_encaps_derand for NTRU KEMs 5.3 Medium
- mozilla firefox, thunderbird +1 more Invalid pointer in the JavaScript Engine: JIT component 8.8 High
- mozilla firefox, thunderbird +1 more Invalid pointer in the Nimbus Desktop Client component 8.8 High
- mozilla firefox, thunderbird +1 more Invalid pointer in the JavaScript Engine component 7.3 High
- mozilla firefox, thunderbird +1 more Invalid pointer in the Graphics: WebRender component 9.8 Critical
- mozilla firefox, thunderbird +1 more Invalid pointer in the JavaScript Engine component 7.3 High
- mozilla firefox, thunderbird +1 more Invalid pointer in the Graphics component 7.3 High
- cesnet libyang libyang through 6.4.13 Uninitialized Pointer Free in NETCONF RPC Parser 6.0 Medium
- php, paloaltonetworks pan-os, panorama virtual appliance +111 more +113 more RCE via stale global state 9.2 Critical
- php, paloaltonetworks pan-os, panorama virtual appliance +110 more +112 more RCE via OOM corruption 9.2 Critical
- eclipse foundation threadx - netx duo NetX Duo Web HTTP server releases an uninitialized packet pointer on the PUT Content-Length underflow path 8.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 more Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup 6.5 Medium
- rapidlasso laszip LASzip through 3.5.0 Invalid Free via Truncated VLR Header in laszip_read_header 5.8 Medium
- kyz libmspack libmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error Path 5.8 Medium
- mozilla firefox, thunderbird +1 more Invalid pointer, undefined behavior in the DOM: Notifications component 9.8 Critical
- apache software foundation thrift Apache Thrift: c_glib read_message_begin leaves output parameters unset for non-versioned messages 8.7 High
- google android In handle_le_monitor_device_event of msft.cc, there is a possible control-flow hijack in the... 7.8 High
- nvidia geforce, rtx, quadro, nvs, tesla +1 more +3 more NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an... 7.8 High
- mozilla firefox, thunderbird +1 more Invalid pointer in the JavaScript: WebAssembly component 9.8 Critical
- tesseract-ocr tesseract, tesseract ocr +1 more Tesseract: Denial of service via empty-stack dereference in Plumbing/Series at model load 6.9 Medium
- mikrotik routeros Unauthenticated file read in Mikrotik RouterOS 8.7 High
- mozilla firefox, thunderbird +1 more Invalid pointer in the Security: PSM component 7.5 High
- mozilla firefox, thunderbird +1 more Invalid pointer in the DOM: Bindings (WebIDL) component 9.8 Critical
- academysoftwarefoundation openexr OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resize 0.0 None
- linux, linux kernel +1 more fwctl: Fix class init ordering to avoid NULL pointer dereference on device removal 5.5 Medium
- adobe dreamweaver, dreamweaver desktop +1 more Dreamweaver Desktop | Access of Uninitialized Pointer (CWE-824) 7.8 High
- samsung open source rlottie Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open Source... 6.1 Medium
- nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +5 more +7 more Crash during DNSSEC validation of malicious content 8.7 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 more BIG-IP DNS Cache vulnerability 8.7 High
- siemens solid edge se2026 A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). The... 7.3 High
- websockets ws, red hat cryostat 4, cryostat 4 on rhel 9 +47 more +49 more ws: Uninitialized memory disclosure 4.4 Medium
- wireshark Access of Uninitialized Pointer in Wireshark 5.5 Medium
- wireshark Access of Uninitialized Pointer in Wireshark 5.5 Medium
- mozilla firefox, thunderbird +1 more Invalid pointer in the Audio/Video: Playback component 5.3 Medium
- mozilla firefox, thunderbird +1 more Invalid pointer in the JavaScript: WebAssembly component 6.3 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 more Uninitialized memory in the Audio/Video: Web Codecs component 7.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 more Information disclosure due to uninitialized memory in the Graphics: Canvas2D component 7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 more Uninitialized memory in the Audio/Video: Web Codecs component 9.8 Critical
- adobe framemaker Adobe Framemaker | Access of Uninitialized Pointer (CWE-824) 5.5 Medium
- debian linux, openbsd openssh, canonical ubuntu linux +37 more +39 more Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This... 2.7 Low
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 more ImageMagick has an uninitialized pointer dereference in JBIG decoder 7.5 High
- huawei harmonyos Vulnerability of uninitialized pointer access in the scanning module. Impact: Successful... 6.8 Medium
- mozilla firefox, thunderbird +1 more Invalid pointer in the DOM: Core & HTML component 9.8 Critical
- mozilla firefox, thunderbird +1 more Invalid pointer in the JavaScript Engine component 9.8 Critical
- https://github.com/rgaufman/live555 rgaufman/live555 Remote code execution via segmentation fault in increasebufferto function 6.3 Medium
- microsoft p11-kit, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +16 more +18 more P11-kit: null dereference via c_derivekey with specific null parameters 5.3 Medium
- vb-audio software matrix, matrix coconut, voicemeeter banana +2 more +4 more VB-Audio Voicemeeter & Matrix Drivers DoS via Improper FILE_OBJECT FsContext Initialization 6.9 Medium
- adobe indesign, indesign desktop +1 more InDesign Desktop | Access of Uninitialized Pointer (CWE-824) 7.8 High
- adobe indesign, indesign desktop +1 more InDesign Desktop | Access of Uninitialized Pointer (CWE-824) 7.8 High
- tp-link systems inc. wr940n and wr941nd Uninitialized Pointer Vulnerability in TP-Link WR940N and WR941ND 6.8 Medium
- Show olderLoading…