CWE-908: Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.
A kind of CWE-665 Improper Initialization.
From the CWE List. © The MITRE Corporation.
Newest
- google androidIn private_handle_t of mali_gralloc_buffer.h, there is a possible information disclosure due to...5.5 Medium
- google androidIn mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to...4.6 Medium
- eclipse openj9, the eclipse foundation eclipse openj9, oracle java se +2 moreIn Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during...5.3 Medium
- google android, mediatek, inc. mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8185, mt8789, mt8791, mt8797 +1 moreIn vow, there is a possible read of uninitialized data due to a improper input validation. This...4.4 Medium
- debian linux, linux kernel +1 moreA kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi...4.4 Medium
- linux kernel, fedoraproject fedora +1 moreA NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user...5.5 Medium
- ti cc3100 firmware, cc3200 firmware, simplelink cc32xx software development kit +2 moreAn information disclosure vulnerability exists in the HTTP Server /ping.html functionality of...5.3 Medium
- google tensorflowUninitialized variable access in Tensorflow7.6 High
- debian linux, linux kernel +1 moreAn issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets...3.3 Low
- dena h2oUnititialized memory access in h2o7.4 High
- google androidIn code generated by aidl_const_expressions.cpp, there is a possible out of bounds read due to...6.5 Medium
- reolink rlc-410w firmwareAn out-of-bounds write vulnerability exists in the device TestEmail functionality of reolink RLC...9.1 Critical
- google chrome, fedoraproject fedora +1 moreUninitialized use in File API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to...8.8 High
- google android, mediatek, inc. mt6580, mt6739, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8167, mt8168, mt8173, mt8362a, mt8365 +1 moreIn seninf driver, there is a possible information disclosure due to uninitialized data. This...4.4 Medium
- google android, mediatek, inc. mt6739, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6883, mt6885, mt6889, mt6893, mt8169 +1 moreIn kd_camera_hw driver, there is a possible information disclosure due to uninitialized data....4.4 Medium
- google androidIn sec_SHA256_Transform of sha256_core.c, there is a possible way to read heap data due to...4.4 Medium
- blackmagicdesign davinci resolveWhen parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will...9.8 Critical
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization...5.5 Medium
- zyantific zydisPossible heap buffer overflow when using zycore string functions in formatter hooks5.9 Medium
- google tensorflowA use of uninitialized value vulnerability in Tensorflow5.5 Medium
- vim, vim vim/vim, debian linux +1 more +3 moreUse of Uninitialized Variable in vim/vim7.3 High
- parallels desktopThis vulnerability allows local attackers to disclose sensitive information on affected...6.5 Medium
- google androidIn display driver, there is a possible memory corruption due to uninitialized data. This could...6.7 Medium
- synchro bulletin board systemAn issue was discovered in function scanallsubs in src/sbbs3/scansubs.cpp in Synchronet BBS,...7.5 High
- google androidIn memzero_explicit of compiler-clang.h, there is a possible bypass of defense in depth due to...5.5 Medium
- cisco ios xe software, ios xe, ios xe sd-wan +144 more +146 moreCisco IOS XE Software NETCONF and RESTCONF Authentication Bypass Vulnerability9.8 Critical
fusercrates.ioFUSE-Rust: Uninitalized memory read and leak caused by fuser crate8.2 High- freebsdIn FreeBSD 13.0-STABLE before n246941-20f96f215562, 12.2-STABLE before r370400, 11.4-STABLE...7.8 High
- adobe preludeAdobe Prelude MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability3.3 Low
- adobe bridgeAdobe Bridge MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability3.3 Low
- dell emc powerscale onefs, powerscale onefs +1 moreDell EMC PowerScale OneFS versions 8.2.x - 9.1.0.x contain a use of uninitialized resource...2.5 Low
- risc-v instruction set manual, riscv.org machine trap base address (mtvec) register +1 moreThe RISC-V Instruction Set Manual contains a documented ambiguity for the Machine Trap Vector...9.8 Critical
- google tensorflowUse of unitialized value in TensorFlow Lite4.4 Medium
- google chrome, fedoraproject fedora +1 moreUninitialized use in Media in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to...8.8 High
- haxx curl, apple mac os x, macos +20 more +22 morecurl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This...5.3 Medium
- qualcomm, inc. snapdragon compute, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, apq8053 firmware +234 more +236 moreAn improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute,...8.4 High
- qemu, debian linux +1 moreAn information disclosure vulnerability was found in the virtio vhost-user GPU device (vhost-user...6.5 Medium
- google androidIn memory management driver, there is a possible out of bounds write due to uninitialized data....7.8 High
- google androidIn memory management driver, there is a possible out of bounds write due to uninitialized data....7.8 High
- dns-packet project dns-packetRemote Memory Exposure7.7 High
- google tensorflowUndefined behavior and `CHECK`-fail in `FractionalMaxPoolGrad`2.5 Low
- google tensorflowSegfault in `CTCBeamSearchDecoder`2.5 Low
- exiv2, fedoraproject fedora +1 moreUninitialized variable bug in Exiv23.6 Low
- google androidIn memory management driver, there is a possible out of bounds write due to uninitialized data....7.8 High
- google androidIn rw_t3t_process_error of rw_t3t.cc, there is a possible double free due to uninitialized data....8.8 High
- parallels desktopThis vulnerability allows local attackers to disclose sensitive information on affected...6.0 Medium
- parallels desktopThis vulnerability allows local attackers to disclose sensitive information on affected...6.5 Medium
- parallels desktopThis vulnerability allows local attackers to disclose sensitive information on affected...6.5 Medium
- parallels desktopThis vulnerability allows local attackers to disclose sensitive information on affected...6.5 Medium
- md4c project md4cmd_analyze_line in md4c.c in md4c 0.4.7 allows attackers to trigger use of uninitialized memory,...5.5 Medium
- Show moreLoading…