CWE-908: Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.
A kind of CWE-665 Improper Initialization.
From the CWE List. © The MITRE Corporation.
Newest
- debian linux, openbsd openssh, canonical ubuntu linux +39 more +41 moreVulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This...2.7 Low
- mozilla firefox, thunderbird +1 moreUninitialized memory in the Graphics: Text component9.1 Critical
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreInformation disclosure due to uninitialized memory in Firefox and Firefox Focus for Android7.5 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +14 more +16 moreGIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability7.8 High
- linux, linux kernel +1 moreinterconnect: debugfs: initialize src_node and dst_node to empty strings5.5 Medium
- google libjxllibjxl: Uninitialized memory read in decoder due to incorrect optimization in patch handling2.3 Low
- linux, linux kernel +1 moreleds: led-class: Only Add LED to leds_list when it is fully ready4.7 Medium
- cadaver turso3dOut-of-bounds write in turso3d10.0 Critical
- linux, linux kernel +1 moreblock: zero non-PI portion of auto integrity buffer5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()7.5 High
- gnu glibcwordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory7.5 High
- gnu glibcgetnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler7.5 High
- linux, linux kernel +1 moreum: init cpu_tasks[] earlier5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morecrypto: af_alg - zero initialize memory allocated via sock_kmalloc5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreDynamic Root of Trust for Measurement (DRTM) Information Disclosure Vulnerability4.4 Medium
- linux, linux kernel +1 moreRDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly5.5 Medium
- cmu panda3dPanda3D <= 1.10.16 Deploy-Stub Stack Exhaustion via Unbounded alloca()6.9 Medium
- linux, linux kernel +1 morefs/ntfs3: Initialize allocated memory before use8.2 High
- siemens simcenter femapA vulnerability has been identified in Simcenter Femap (All versions < V2512). The affected...7.3 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +30 more +32 moreWindows Remote Access Connection Manager Elevation of Privilege Vulnerability7.8 High
- dell controlvault3, controlvault3 plus, broadcom bcm5820x +2 moreDell ControlVault3 ControlVault WBDI Driver hard-coded password vulnerability8.7 High
- dell controlvault3, controlvault3 plus, broadcom bcm5820x +2 moreDell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter privilege escalation vulnerability8.7 High
direct_ring_buffercrates.ioDirect Ring Buffer has uninitialized memory exposure in create_ring_buffer2.0 Low- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreSamba: vfs_streams_xattr uninitialized memory write possible4.3 Medium
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +10 more +12 moreWindows Kernel Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +19 more +21 moreWindows Management Services Information Disclosure Vulnerability5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX4700: When forwarding-options sampling is enabled any traffic destined to the RE will cause the forwarding line card to crash and restart8.7 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morecrypto: af_alg - Set merge to zero early in af_alg_sendmsg7.8 High
- linux, linux kernel +1 morearm64: kexec: initialize kexec_buf struct in load_other_segments()5.5 Medium
- linux, linux kernel +1 morecan: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write5.5 Medium
- linux, linux kernel +1 moreof/fdt: run soc memory setup when early_init_dt_scan_memory fails5.5 Medium
- linux, linux kernel +1 moremISDN: hfcpci: Fix warning when deleting uninitialized timer5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +2 moresctp: initialize more fields in sctp_v6_from_sk()5.5 Medium
- linux, linux kernel +1 more9p: set req refcount to zero to avoid uninitialized usage9.8 Critical
- linux, linux kernel +1 morechardev: fix error handling in cdev_device_add()5.5 Medium
- linux, linux kernel +1 moreudf: Fix uninitialized array access for some pathnames5.5 Medium
- linux, linux kernel +1 moreiommu/mediatek: Fix crash on isr after kexec()5.5 Medium
- microsoft 365 copilot, office for android, windows 10 version 1507 +34 more +36 moreWindows Imaging Component Information Disclosure Vulnerability5.5 Medium
- linux, linux kernel +1 moreiio: accel: sca3300: fix uninitialized iio scan data5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +2 morecomedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()5.5 Medium
- linux, linux kernel +1 morecifs: Fix oops due to uninitialised variable9.8 Critical
- debian linux, linux kernel +1 moresctp: linearize cloned gso packets in sctp_rcv7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +3 more +5 morepNFS: Fix uninited ptr deref in block/scsi layout5.5 Medium
- google androidIn ReadTachyonCommands of gxp_main_actor.cc, there is a possible information leak due to...5.5 Medium
- linux, linux kernel +1 morenvmet: pci-epf: Do not complete commands twice if nvmet_req_init() fails8.8 High
- debian linux, linux kernel +1 morewifi: mac80211: reject TDLS operations when station is not associated5.5 Medium
- linux, linux kernel +1 morevdpa/mlx5: Fix release of uninitialized resources on error path5.5 Medium
- linux, linux kernel +1 morestaging: gpib: fix unset padding field copy back to userspace5.5 Medium
- debian linux, linux kernel +1 morebpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls8.6 High
- debian linux, linux kernel +1 moref2fs: fix KMSAN uninit-value in extent_info usage7.8 High
- Show moreLoading…