CWE-908: Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.
A kind of CWE-665 Improper Initialization.
From the CWE List. © The MITRE Corporation.
Newest
- md4c project md4cmd_push_block_bytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized...7.5 High
- google tensorflow, opensuse leap +1 moreMemory corruption in Tensorflow7.1 High
- powerdns authoritativeAn issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user...4.3 Medium
- google androidIn NFC, there is a possible out of bounds read due to uninitialized data. This could lead to...7.5 High
- google androidIn libhwbinder, there is a possible information disclosure due to uninitialized data. This could...4.4 Medium
- google androidIn NFC, there is a possible out of bounds write due to uninitialized data. This could lead to...6.7 Medium
- google androidIn libDRCdec, there is a possible information disclosure due to uninitialized data. This could...6.5 Medium
- google androidIn libcodec2_soft_mp3dec, there is a possible information disclosure due to uninitialized data....6.5 Medium
- google androidIn the mp3 extractor, there is a possible out of bounds write due to uninitialized data. This...8.8 High
- objective open cbor run-time project open cbor run-timeA memory corruption vulnerability in Objective Open CBOR Run-time (oocborrt) in versions before...9.8 Critical
- microsoft office, office 2016 for mac, office 2019 for mac +2 moreMicrosoft Office Information Disclosure Vulnerability5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +49 more +51 moreu'Accessing an uninitialized data structure could result in partially copying of contents and...9.8 Critical
- simple-slab project simple-slabOff-by-one error in simple-slab7.5 High
- alg ds project dsUse of Uninitialized Resource in alg_ds9.8 Critical
- arr project arrMultiple security issues including data race, buffer overflow, and uninitialized memory drop in arr9.8 Critical
- arr project arrMultiple security issues including data race, buffer overflow, and uninitialized memory drop in arr9.8 Critical
- arr project arrMultiple security issues including data race, buffer overflow, and uninitialized memory drop in arr4.7 Medium
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....6.0 Medium
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....6.0 Medium
- microsoft office, 365 apps, 365 apps for enterprise for 32-bit systems +6 more +8 moreAn information disclosure vulnerability exists when Microsoft Office software reads out of bound...5.5 Medium
- python, netapp snapcenter, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on...7.8 High
- ozone project ozoneDrop of uninitialized memory in Ozone9.8 Critical
- ozone project ozoneOut of bounds read in Ozone9.8 Critical
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before...4.7 Medium
- sane-project sane backends, canonical ubuntu linux, opensuse leap +2 moreAn out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to...4.3 Medium
- google androidIn ihevcd_iquant_itrans_recon_ctb of ihevcd_iquant_itrans_recon_ctb.c and related functions,...6.5 Medium
- meetecho janusAn issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0....7.5 High
- microsoft project, 365 apps, 365 apps for enterprise for 32-bit systems +2 more +4 moreAn information disclosure vulnerability exists when Microsoft Project reads out of bound memory...6.5 Medium
- microsoft windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems, windows 10 version 1903 for x64-based systems +11 more +13 moreAn information disclosure vulnerability exists in the way that the Microsoft Server Message Block...7.5 High
- linux kernel, canonical ubuntu linux, netapp active iq unified manager +16 more +18 moreA flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows...3.3 Low
- libexif project libexif, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote...8.2 High
- google androidIn BnCrypto::onTransact of ICrypto.cpp, there is a possible information disclosure due to...5.5 Medium
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....7.5 High
- freebsdIn FreeBSD 12.1-STABLE before r358739, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before...5.3 Medium
- oppo coloros, color os +1 moreIn ColorOS (oppo mobile phone operating system, based on AOSP frameworks/native code position...7.5 High
- google androidAn issue was discovered on LG mobile devices with Android OS 8.0 and 8.1 software for the DTAG...6.8 Medium
- ruby-lang ruby, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim...5.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUninitialized use in WebRTC in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...6.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen reading from areas partially or fully outside the source resource with WebGL's <code...7.5 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel through 5.6.2....4.4 Medium
- apache http server, canonical ubuntu linux, debian linux +8 more +10 moreIn Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying...5.3 Medium
- usc cerealAn issue was discovered in USC iLab cereal through 1.3.0. Serialization of an (initialized) C/C++...5.3 Medium
- google androidAn issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) software....3.3 Low
- google androidIn onReadBuffer() of StreamingSource.cpp, there is a possible information disclosure due to...6.5 Medium
- google androidIn onTransact of IAudioFlinger.cpp, there is a possible stack information leak due to...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +18 more +20 moreAccess to the uninitialized variable when the driver tries to unmap the dma buffer of a request...7.8 High
- openfortivpn project openfortivpn, fedoraproject fedora, opensuse backports sle +1 more +3 moreAn issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c...5.3 Medium
- mozilla thunderbirdWhen processing an email message with an ill-formed envelope, Thunderbird could read data from a...6.5 Medium
- mozilla thunderbird, canonical ubuntu linux +1 moreWhen deriving an identifier for an email message, uninitialized memory was used in addition to...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreUse of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote...8.8 High
- Show moreLoading…