CWE-908: Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.
A kind of CWE-665 Improper Initialization.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipv4: Fix uninit-value access in __ip_make_skb()4.7 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipv6: Fix potential uninit-value access in __ip6_make_skb()5.5 Medium
- linux, linux kernel +1 morenet: hns3: fix kernel crash when devlink reload during initialization5.5 Medium
- linux, linux kernel +1 moregpiolib: cdev: fix uninitialised kfifo7.1 High
- linux, linux kernel +1 morenet: hns3: fix kernel crash when devlink reload during pf initialization5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morei40e: fix vf may be used uninitialized in this function warning7.8 High
- linux, linux kernel +1 morevdpa_sim: avoid putting an uninitialized iova_domain5.5 Medium
- linux, linux kernel +1 moresched/scs: Reset task stack state in bringup_cpu()7.8 High
- linux, linux kernel +1 moremm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()5.5 Medium
- linux, linux kernel +1 morenetfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value7.8 High
- linux, linux kernel +1 moredrm/msm/a4xx: fix error handling in a4xx_gpu_init()7.8 High
- linux, linux kernel +1 moretipc: Change nla_policy for bearer-related names to NLA_NUL_STRING7.1 High
- linux, linux kernel +1 morellc: verify mac len before reading mac header5.5 Medium
- linux, linux kernel +1 morevirtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()7.1 High
- linux, linux kernel +1 morecxl/region: Do not try to cleanup after cxl_region_setup_targets() fails5.5 Medium
- linux, linux kernel +1 morenet/usb: kalmia: Don't pass act_len in usb_bulk_msg error path5.5 Medium
- linux, linux kernel +1 morei40e: Fix freeing of uninitialized misc IRQ vector5.5 Medium
- linux, linux kernel +1 moremedia: v4l2-core: explicitly clear ioctl input data5.5 Medium
- linux, linux kernel +1 morenet: fix uninit-value in caif_seqpkt_sendmsg5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moregeneve: fix header validation in geneve[6]_xmit_skb5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet8.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet/sched: act_skbmod: prevent kernel-infoleak5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreerspan: make sure erspan_base_hdr is present in skb->head7.3 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebtrfs: fix information leak in btrfs_ioctl_logical_to_ino()7.1 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morecpumap: Zero-initialise xdp_rxq_info struct before running XDP program7.8 High
- throughtek kalay sdk, owletcare cam 2 firmware, cam firmware +3 more +5 moreThroughTek Kalay SDK error in handling the PSK identity8.1 High
- hdfgroup hdf5, hdf5library +1 moreHDF5 Library through 1.14.3 may use an uninitialized value in H5A__attr_release_table in H5Aint.c.9.8 Critical
- hdfgroup hdf5HDF5 Library through 1.14.3 may attempt to dereference uninitialized values in h5tools_str_sprint...5.7 Medium
- linux kernel, openbsd +1 moreOpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability3.3 Low
- linux kernel, openbsd +1 moreOpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability3.8 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor J2K File Parsing Uninitialized Variable Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor U3D File Parsing Uninitialized Variable Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor U3D File Parsing Uninitialized Variable Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pro, pdf-tools +2 morePDF-XChange Editor J2K File Parsing Uninitialized Variable Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor J2K File Parsing Uninitialized Variable Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pro, pdf-tools +2 morePDF-XChange Editor PDF File Parsing Uninitialized Variable Information Disclosure Vulnerability3.3 Low
- linux, linux kernel +1 morefork: defer linking file vma until vma is fully initialized7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 morefat: fix uninitialized field in nostale filehandles5.5 Medium
- linux, linux kernel +1 morenetfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moredo_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak5.5 Medium
- linux, linux kernel +1 moredrm/bridge: adv7511: fix crash on irq during probe5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 morehsr: Fix uninit-value access in hsr_get_node()5.5 Medium
- debian linux, linux kernel +1 moregeneve: make sure to pull inner header in geneve_rx()7.3 High
- linux, linux kernel +1 morenetlink: add nla be16/32 types to minlen array5.5 Medium
- mozilla firefoxThe MarkStack assignment operator, part of the JavaScript engine, could access uninitialized...5.3 Medium
- cs technologies australia evolution controller, cs-technologies evolution +1 moreUnsanitised variable on DAL_ADD in Evolution Controller causes application level denial of service and crash7.5 High
- ibm security verify access appliance, security verify access +1 moreIBM Security Verify Access Appliance denial of service6.2 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +21 more +23 moreWindows Mobile Hotspot Information Disclosure Vulnerability5.0 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 moreMicrosoft Local Security Authority Subsystem Service Information Disclosure Vulnerability5.5 Medium
- 3ds edrawingsOut-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the SLDDRW and SLDPRT file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SO…7.8 High
- Show moreLoading…