CWE-908: Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.
A kind of CWE-665 Improper Initialization.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Smart Card Reader Information Disclosure Vulnerability2.4 Low
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreMicrosoft Message Queuing Information Disclosure Vulnerability7.5 High
- microsoft outlook, 365 apps, 365 apps for enterprise +6 more +8 moreMicrosoft Outlook Remote Code Execution Vulnerability6.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows COM Server Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows COM Server Information Disclosure Vulnerability6.5 Medium
- ivanti endpoint managerAn uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...7.8 High
- linux, linux kernel +1 morearm64: ptrace: fix partial SETREGSET for NT_ARM_FPMR6.1 Medium
- linux, linux kernel +1 morearm64: ptrace: fix partial SETREGSET for NT_ARM_POE6.1 Medium
- linux, linux kernel +1 morearm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL6.1 Medium
- linux, linux kernel +1 moreipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()5.5 Medium
- samba rsync, almalinux, archlinux arch linux +24 more +26 moreRsync: --safe-links option bypass leads to path traversal6.5 Medium
- samba rsync, almalinux, archlinux arch linux +32 more +34 moreRsync: path traversal vulnerability in rsync6.5 Medium
- samba rsync, almalinux, archlinux arch linux +13 more +15 moreRsync: rsync server leaks arbitrary client files6.1 Medium
- samba rsync, almalinux, archlinux arch linux +44 more +46 moreRsync: info leak via uninitialized stack contents7.5 High
- samba rsync, almalinux, archlinux arch linux +11 more +13 moreRsync: heap buffer overflow in rsync due to improper checksum length handling9.8 Critical
- huawei harmonyosVulnerability of variables not being initialized in the notification module Impact: Successful...4.0 Medium
- linux, linux kernel +1 moremedia: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg5.5 Medium
- linux, linux kernel +1 morertc: check if __rtc_read_time was successful in rtc_timer_do_work()5.5 Medium
- linux, linux kernel +1 moreASoC: mediatek: Check num_codecs is not zero to avoid panic during probe5.5 Medium
- linux, linux kernel +1 morepowerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()7.8 High
- linux, linux kernel +1 morenet: hsr: avoid potential out-of-bound access in fill_frame_info()5.5 Medium
- linux, linux kernel +1 moreocfs2: free inode when ocfs2_get_init_inode() fails5.5 Medium
- linux, linux kernel +1 moreocfs2: fix uninitialized value in ocfs2_file_read_iter()7.1 High
- rockwell automation arena®, rockwellautomation arena +1 moreRockwell Automation Third Party Vulnerability in Arena®8.5 High
- gstreamerGHSL-2024-197: GStreamer uses uninitialized stack memory in Matroska/WebM demuxer8.6 High
- dfinity motokoUninitialized memory access in Motoko incremental garbage collector5.6 Medium
- google androidIn buildImageItemsIfPossible of ItemTable.cpp there is a possible out of bound read due to...6.5 Medium
- google androidIn gatts_process_read_by_type_req of gatt_sr.c, there is a possible information disclosure due to...7.5 High
- google androidIn BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible information...5.5 Medium
- qualcomm sd 450 firmware, sd 625 firmware, sd 820 firmware +5 more +7 moreInformation Exposure in Camera Driver8.4 High
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morefs: Fix uninitialized value issue in from_kuid and from_kgid5.5 Medium
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability7.8 High
- trimble sketchup viewerTrimble SketchUp Viewer SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability7.8 High
- google androidIn writeInplace of Parcel.cpp, there is a possible information leak across processes, using...5.5 Medium
- google androidIn BnCameraService::onTransact of CameraService.cpp, there is a possible information disclosure...5.5 Medium
- google androidIn BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information...5.5 Medium
- google androidIn BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information...5.5 Medium
- linux, linux kernel +1 moreusb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier5.5 Medium
- linux, linux kernel +1 morenfs: Fix KMSAN warning in decode_getfattr_attrs()9.8 Critical
- debian linux, linux kernel, google android +3 more +5 moreHID: core: zero-initialize the report buffer5.5 Medium
- linux, linux kernel +1 moreregulator: rtq2208: Fix uninitialized use of regulator_config7.8 High
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moresctp: properly validate chunk size in sctp_sf_ootb()8.2 High
- linux, linux kernel +1 morebtrfs: reinitialize delayed ref list after deleting it from the list7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +8 more +10 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- linux, linux kernel +1 moreNFSD: Initialize struct nfsd4_copy earlier7.5 High
- linux, linux kernel +1 morewifi: mac80211: do not pass a stopped vif to the driver in .get_txpower7.8 High
- linux, linux kernel +1 moredrm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup()7.8 High
- linux, linux kernel +1 moreudf: fix uninit-value use in udf_get_fileshortad7.8 High
- linux, linux kernel +1 morexfrm: fix one more kernel-infoleak in algo dumping5.5 Medium
- autodesk autocad, advance steel, autocad architecture +17 more +19 moreAutodesk AutoCAD DXF File Parsing Unitialized Variable Code Execution Vulnerability7.8 High
- Show moreLoading…