CWE-908: Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.
A kind of CWE-665 Improper Initialization.
From the CWE List. © The MITRE Corporation.
Newest
- rust-lang rust, the rust programming language standard library +1 moreThe Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200:...5.3 Medium
- wavpack, canonical ubuntu linux, debian linux +1 more +3 moreWavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is:...5.5 Medium
- wavpack, canonical ubuntu linux, debian linux +1 more +3 moreWavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is:...5.5 Medium
- google androidIn various functions of Parcel.cpp, there are uninitialized or partially initialized stack...5.5 Medium
- google androidIn FileInputStream::Read of file_input_stream.cc, there is a possible memory corruption due to...8.8 High
- google androidIn HIDL, safe_union, and other C++ structs/unions being sent to application processes, there are...5.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 more +4 moreImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function...8.8 High
- xmlsoft libxslt, canonical ubuntu linux, debian linux +3 more +5 moreUninitialized read in Nokogiri gem5.3 Medium
- google androidIn publishKeyEvent, publishMotionEvent and sendUnchainedFinishedSignal of InputTransport.cpp,...5.5 Medium
- artifex mupdfUsage of an uninitialized variable in the function fz_load_jpeg in Artifex MuPDF 1.14 can result...9.8 Critical
- pnet project pnetMissing Initialization of Resource in pnet7.5 High
- libgd, php, canonical ubuntu linux +10 more +12 moreUninitialized read in gdImageCreateFromXbm3.1 Low
- mozilla firefox, firefox esr, thunderbird +2 moreA vulnerability exists in the Windows sandbox where an uninitialized value in memory can be...7.5 High
- ffmpegaa_read_header in libavformat/aadec.c in FFmpeg before 3.2.14 does not check for sscanf failure...9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +12 more +14 morefs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in...5.5 Medium
- haproxyHAProxy before 1.9.7 mishandles a reload with rotated keys, which triggers use of uninitialized,...5.9 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUninitialized data in media in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to...6.5 Medium
- symantec norton security, symantec corporation sep (windows client), sep cloud +4 more +6 moreSymantec Norton Security prior to 22.16.3, SEP (Windows client) prior to and including 12.1 RU6...6.5 Medium
- gnome evince, canonical ubuntu linux, debian linux +6 more +8 moreThe tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document...5.5 Medium
- mozilla firefoxA latent vulnerability exists in the Prio library where data may be read from uninitialized...9.8 Critical
- qemutcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in...5.5 Medium
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...9.8 Critical
- php, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 High
- yubico libu2f-hostIn devs.c in Yubico libu2f-host before 1.1.8, the response to init is misparsed, leaking...7.5 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...5.5 Medium
- wibu wibukeyAn exploitable kernel memory disclosure vulnerability exists in the 0x8200E804 IOCTL handler...4.3 Medium
- libvipslibvips before 8.7.4 generates output images from uninitialized memory locations when processing...5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX, QFX and MX series: Packet Forwarding Engine manager (FXPC) process crashes due to a crafted HTTP packet in a Virtual Chassis configuration9.8 Critical
- google libwebp, redhat enterprise linux +1 moreA flaw was found in libwebp in versions before 1.0.1. An unitialized variable is used in function...9.8 Critical
- virustotal yaraIn YARA 3.8.1, bytecode in a specially crafted compiled rule can read uninitialized data from VM...5.5 Medium
- microsoft excel, excel viewer, office +3 more +5 moreAn information disclosure vulnerability exists when Microsoft Excel software reads out of bound...5.5 Medium
- nomachine, dokan-dev dokany +1 moreThe nxfs.sys driver in the DokanFS library 0.6.0 in NoMachine before 6.4.6 on Windows 10 allows...5.5 Medium
- google androidIn really_install_package of install.cpp, there is a possible free of arbitrary memory due to...7.8 High
- vmware esxi, fusion, workstation +2 moreVMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG...6.5 Medium
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG,...8.8 High
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was...5.5 Medium
- sophos hitmanpro.alert, talos sophos +1 moreAn exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality...4.0 Medium
- google androidIn readVector of iCrypto.cpp, there is a possible invalid read due to uninitialized data. This...5.5 Medium
- atlantiswordprocessor atlantis word processorAn exploitable uninitialized variable vulnerability exists in the RTF-parsing functionality of...7.5 High
- servo smallvecUse of Uninitialized Resource in smallvec7.5 High
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +8 more +10 moreIn Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could...7.8 High
- claxon project claxonUninitialized memory exposure in claxon6.5 Medium
- node.jsIn all versions of Node.js 10 prior to 10.9.0, an argument processing flaw can cause `Buffer...7.5 High
- godotengine godotGodot Engine version All versions prior to 2.1.5, all 3.0 versions prior to 3.0.6. contains a...7.5 High
- microsoft excel viewer, office, office word viewer +8 more +10 moreAn information disclosure vulnerability exists when Microsoft Office software reads out of bound...5.5 Medium
- imagemagick, canonical ubuntu linux +1 moreThe ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable...9.8 Critical
- google chromeUninitialized data in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...4.3 Medium
- radare radare2The r_strbuf_fini() function in radare2 2.5.0 allows remote attackers to cause a denial of...5.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreWebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while...7.5 High
- 7-zipIncorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage...7.8 High
- Show moreLoading…