CWE-908: Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.
A kind of CWE-665 Improper Initialization.
From the CWE List. © The MITRE Corporation.
Newest
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 morenetlink: Fix kernel-infoleak-after-free in __skb_datagram_iter5.5 Medium
- debian linux, linux kernel +1 moredmaengine: fsl-qdma: init irq after reg initialization5.5 Medium
- linux, linux kernel +1 moreiio: adc: ad4130: zero-initialize clock init data5.5 Medium
- android pixel, google android +1 morethere is a possible Information Disclosure due to uninitialized data. This could lead to local...5.5 Medium
- google chromeUninitialized Use in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to...4.3 Medium
- debian linux, linux kernel +1 morebtrfs: don't abort filesystem when attempting to snapshot deleted subvolume5.5 Medium
- linux, linux kernel +1 morenet: hns3: put off calling register_netdev() until client initialize complete5.5 Medium
- linux, linux kernel +1 morenet: zero-initialize tc skb extension on allocation8.6 High
- dassault systèmes solidworks desktop, 3ds 3dexperience solidworks +1 moreMultiple vulnerabilities exist in file reading procedure in SOLIDWORKS Desktop on Release SOLIDWORKS 20247.8 High
- debian linux, linux kernel, netapp a150 firmware +11 more +13 moreip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()8.6 High
- linux, linux kernel +1 morenbd: always initialize struct msghdr completely4.4 Medium
- linux, linux kernel +1 moreasix: fix uninit-value in asix_mdio_read()7.1 High
- linux, linux kernel +1 moreALSA: rawmidi - fix the uninitalized user_pversion4.0 Medium
- linux, linux kernel +1 moredccp: fix dccp_v4_err()/dccp_v6_err() again5.5 Medium
- linux, linux kernel +1 morenet: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg5.5 Medium
- linux, linux kernel +1 morecrypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init5.5 Medium
- 3ds edrawings, solidworks +1 moreMultiple vulnerabilities exist in file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 20247.8 High
crayoncrates.iocrayon: ObjectPool creates uninitialized memory when freeing objects7.5 High- antonkueltz fastecdsaUninitialized Variable in fastecdsa7.5 High
- autodesk autocad, advance steel, autocad architecture +9 more +11 moreMultiple Vulnerabilities in the Autodesk AutoCAD Desktop Software7.8 High
- helmHelm's Missing YAML Content Leads To Panic7.5 High
- f5 big-ip, big-ip next spk, big-ip access policy manager +12 more +14 moreBIG-IP HTTP/2 vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +19 more +21 moreWindows CoreMessaging Information Disclosure Vulnerability5.5 Medium
- siemens cp-8031 master module, cp-8050 master module, sicam a8000 cp-8031 firmware +1 more +3 moreA vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.20), CP...6.6 Medium
- silabs.com z/ip gateway sdk, silabs z\/ip gateway sdk +1 moreZ/IP Gateway Use of Uninitialized PRNG when Generating S0 Encryption Key6.4 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +13 more +15 moreDHCP Server Service Information Disclosure Vulnerability5.3 Medium
- kingsoft wps office, wps office +1 moreAn uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537...8.8 High
- openatom openharmonyCert manager has a use of uninitialized resource vulnerability6.2 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 moreWindows NTFS Information Disclosure Vulnerability6.5 Medium
- microsoft host integration server 2020, host integration server, ole db provider +2 moreMicrosoft Host Integration Server 2020 Remote Code Execution Vulnerability8.8 High
- nothings stb, stb image, stb image.h +2 moreDisclosure of uninitialized memory in stbi__tga_load in stb_image5.3 Medium
- softether vpnAn information disclosure vulnerability exists in the ClientConnect() functionality of SoftEther...5.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Deployment Services Information Disclosure Vulnerability7.5 High
- microsoft windows 10 version 1809, windows server 2019, windows server 2019 (server core installation) +1 more +3 moreWindows Setup Files Cleanup Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Common Log File System Driver Information Disclosure Vulnerability5.5 Medium
- gnu binutils, fedora extra packages for enterprise linux 7, extra packages for enterprise linux 8 +7 more +9 moreLocal variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized4.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +12 more +14 moreWindows Kernel Information Disclosure Vulnerability5.5 Medium
- google androidIn multiple locations of avrc, there is a possible leak of heap data due to uninitialized data....7.5 High
- intel nuc 11 compute element cm11ebc4w firmware, nuc 11 compute element cm11ebi38w firmware, nuc 11 compute element cm11ebi58w firmware +85 more +87 moreUse of uninitialized resource in some Intel(R) NUC BIOS firmware may allow a privileged user to...6.0 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreMicrosoft Message Queuing Information Disclosure Vulnerability6.5 Medium
- google androidIn writeToParcel of CursorWindow.cpp, there is a possible information disclosure due to...5.5 Medium
- silabs.com gecko bootloader, silabs gecko software development kit +1 moreUninitialized variable in Gecko Bootloader can leak secure stack3.8 Low
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a MoFRR scenario an rpd core may be observed when a low privileged CLI command is executed4.7 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +10 more +12 moreWindows CDP User Components Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreWindows Print Spooler Information Disclosure Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreOLE Automation Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +14 more +16 moreWindows Update Orchestrator Service Information Disclosure Vulnerability5.5 Medium
- google androidThe PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver can return uninitialized...5.5 Medium
- virtualsquare picotcpVirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not have an MSS lower bound (e.g., it...7.5 High
- silabs gecko software development kit, silabs.com gsdk +1 moreUninitialized IV in Silicon Labs SE FW v2.0.0 through v 2.2.1 for internally stored data3.1 Low
- Show moreLoading…