CWE-908: Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.
A kind of CWE-665 Improper Initialization.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Installer Information Disclosure Vulnerability5.5 Medium
- microsoft windows server 2012 r2, windows server 2012 r2 (server core installation), windows server 2016 +5 more +7 moreiSCSI Target WMI Provider Remote Code Execution Vulnerability7.8 High
- google androidIn readSampleData of NuMediaExtractor.cpp, there is a possible out of bounds write due to...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen reading a file, an uninitialized value could have been used as read limit. This...8.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +6 more +8 moreWindows Network File System Remote Code Execution Vulnerability9.8 Critical
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An attacker sending genuine BGP packets causes an RPD crash7.5 High
- securepoint unified threat managementAn issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi...6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- qualcomm mdm8207 firmware, mdm9205 firmware, mdm9206 firmware +10 more +12 moreUse of Uninitialized Variable in MODEM7.5 High
- opensipsOpenSIPS has vulnerability in the parse_via() function7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- moby hyperkitMoby HyperKit uninitialized memory use in virtio-sock pci_vtsock_proc_tx7.7 High
- moby hyperkitMoby HyperKit uninitialized memory use vtrnd pci_vtrnd_notify7.7 High
- gnu binutils, fedora extra packages for enterprise linux 7, extra packages for enterprise linux 8 +7 more +9 moreField `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`4.7 Medium
- gnu binutils, fedora extra packages for enterprise linux 7, extra packages for enterprise linux 8 +7 more +9 moreField `file_table` of `struct module *module` is uninitialized4.7 Medium
- f5 big-ip, big-ip advanced firewall manager +1 moreBIG-IP AFM vulnerability7.5 High
- solarwinds dynamipsUse of uninitialized variable in function gen_eth_recv in GNS3 dynamips 0.2.21.7.5 High
- microsoft windows 10 version 1809, windows server 2019, windows server 2019 (server core installation) +1 more +3 moreEvent Tracing for Windows Information Disclosure Vulnerability5.5 Medium
- ewxrjk sftpserverewxrjk sftpserver parse.c sftp_parse_path uninitialized pointer4.6 Medium
- altair hyperview playerAltair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized...7.8 High
- altair hyperview playerAltair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized...7.8 High
- google android, mediatek, inc. mt6983, mt8871, mt8891 +1 moreIn isp, there is a possible out of bounds write due to uninitialized data. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6983, mt8871, mt8891 +1 moreIn ccd, there is a possible out of bounds write due to uninitialized data. This could lead to...6.7 Medium
- dell alienware area-51 r4 firmware, alienware area-51 r5 firmware, cpg bios +2 moreDell BIOS contains a use of uninitialized variable vulnerability. A local authenticated malicious...7.5 High
- freerdp, fedoraproject fedora +1 moreFreeRDP may read and display out of bounds data5.9 Medium
- freerdp, fedoraproject fedora +1 moreRDP client: Read of uninitialized memory with parallel port redirection3.5 Low
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moredrivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive...5.5 Medium
- scylladb scyllaUninitialized memory read in LZ4 decompression leads to authentication bypass in Scylla8.1 High
- linux kernelA flaw was found in vDPA with VDUSE backend. There are currently no checks in VDUSE kernel driver...6.5 Medium
- crowcpp crowHTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive data...7.5 High
- radare radare2A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when...7.5 High
- google android, samsung mobile devices +1 moreAn absence of variable initialization in ICCC TA prior to SMR Aug-2022 Release 1 allows local...2.3 Low
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreTMM vulnerability CVE-2022-346557.5 High
- mediatek nbiot sdk, mediatek, inc. mt2621, mt2625 +1 moreIn httpclient, there is a possible out of bounds write due to uninitialized data. This could lead...9.8 Critical
- google androidIn writeToParcel of SurfaceControl.cpp, there is a possible information disclosure due to...5.5 Medium
- google androidIn PVRSRVBridgeHeapCfgHeapConfigName, there is a possible leak of kernel heap content due to...5.5 Medium
- google androidIn PVRSRVBridgeHeapCfgHeapDetails, there is a possible leak of kernel heap content due to...5.5 Medium
- sambaA flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with...8.1 High
- libtiffThe libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a...5.5 Medium
- qemu, debian linux +1 moresoftmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail...8.8 High
- zephyrproject zephyrL2CAP: Information leakage in le_ecred_conn_req()4.0 Medium
- gpacThe gf_hinter_track_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service...5.5 Medium
- discordjs opusDenial of Service (DoS)7.5 High
- github trilogyUse of Uninitialized Variable in trilogy5.9 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA crafted CMS message could have been processed incorrectly, leading to an invalid memory read,...8.8 High
- google androidIn auth_store of sjtag-driver.c, there is a possible read of uninitialized memory due to a...4.4 Medium
- google tensorflowSegfault due to missing support for quantized types in TensorFlow5.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, and 14.1.x...5.9 Medium
- libwav project libwavThe function wav_format_write in libwav.c in libwav through 2017-04-20 has an Use of...7.5 High
- google android, mediatek, inc. mt6765, mt6768, mt6769, mt8183, mt8185, mt8385, mt8666, mt8667, mt8768, mt8786, mt8788, mt8789 +1 moreIn camera, there is a possible information disclosure due to uninitialized data. This could lead...4.4 Medium
- Show moreLoading…