CWE-908: Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.
A kind of CWE-665 Improper Initialization.
From the CWE List. © The MITRE Corporation.
Newest
- eclipse threadx netx duo, eclipse foundation threadx - netx duo +1 moreThe security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP server PUT process to use a shared cleanup label, but this unified cleanup path unconditionally call…7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows Push Notification Information Disclosure Vulnerability5.5 Medium
- 7-zipGHSL-2026-120: 7-Zip SquashFS BlockToNode uninitialized heap read4.2 Medium
- 7-zipGHSL-2026-117: 7-Zip UEFI Capsule uninitialized heap memory disclosure6.5 Medium
- google chromeUninitialized Use in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who...6.5 Medium
- linux, linux kernel +1 moreclocksource/drivers/timer-sp804: Fix an Oops when read_current_timer is called on ARM32 platforms where the SP804 is not registered as the sched_clock.5.5 Medium
- libxls project libxlsA use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS...5.3 Medium
- linux, linux kernel +1 moreBluetooth: virtio_bt: validate rx pkt_type header length5.5 Medium
- linux, linux kernel +1 morehfsplus: fix uninit-value by validating catalog record size5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreusb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl5.5 Medium
- linux, linux kernel +1 moresmb: client: use kzalloc to zero-initialize security descriptor buffer5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo5.5 Medium
- struktur libheiflibheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation7.5 High
- mcdope pam usbpam_usb: OTP pad authentication bypass via missing system pad check and uninitialized RNG buffer7.1 High
- linux, linux kernel +1 morefs/ntfs3: Initialize new folios before use8.2 High
- linux, linux kernel +1 morebpf: Fix bpf_xdp_store_bytes proto for read-only arg5.5 Medium
- strukturag libheiflibheif: Uninitialized Heap Memory Information Leak via Failed Grid Tiles6.5 Medium
- amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +3 more +5 moreUse of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an...6.9 Medium
- microsoft office, word, 365 apps +8 more +10 moreMicrosoft Word Remote Code Execution Vulnerability8.4 High
- linux, linux kernel +1 morefs: init flags_valid before calling vfs_fileattr_get5.5 Medium
- linux, linux kernel +1 moreunshare: fix unshare_fs() handling5.5 Medium
- linux, linux kernel +1 morebonding: fix type confusion in bond_setup_by_slave()7.8 High
- linux, linux kernel +1 morelibceph: Use u32 for non-negative values in ceph_monmap_decode()7.5 High
- linux, linux kernel +1 moref2fs: fix to avoid uninit-value access in f2fs_sanity_check_node_footer5.5 Medium
- linux, linux kernel +1 morenet: nfc: nci: Fix parameter validation for packet data8.3 High
- linux, linux kernel +1 moreext4: move ext4_percpu_param_init() before ext4_mb_init()5.5 Medium
- linux, linux kernel +1 moreipmi: ipmb: initialise event handler read bytes5.5 Medium
- linux, linux kernel +1 moremfd: macsmc: Initialize mutex5.5 Medium
- linux, linux kernel +1 morexfrm6: fix uninitialized saddr in xfrm6_get_saddr()8.6 High
- websockets ws, red hat cryostat 4, cryostat 4 on rhel 9 +47 more +49 morews: Uninitialized memory disclosure4.4 Medium
- linux, linux kernel +1 morenet: use skb_header_pointer() for TCPv4 GSO frag_off check5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak5.5 Medium
- linux, linux kernel +1 morecifs: some missing initializations on replay7.8 High
- vllmvLLM KV Block kv_cache_interface.py has_mamba_layers uninitialized resource6.3 Medium
- linux, linux kernel +1 morestaging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()7.1 High
- linux, linux kernel +1 morebnge: return after auxiliary_device_uninit() in error path5.5 Medium
- linux, linux kernel +1 moreRDMA/irdma: Initialize free_qp completion before using it5.5 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +17 more +19 moreInformation disclosure due to uninitialized memory in the Graphics: Canvas2D component7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Boot Manager Security Feature Bypass Vulnerability4.6 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp5.5 Medium
- academysoftwarefoundation openexrOpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo_pxr24_impl)8.7 High
- n8nn8n has In-Process Memory Disclosure in its Task Runner7.1 High
- linux, linux kernel +1 moredrm/amdgpu: Fix error handling in slot reset5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrm/vmwgfx: Return the correct value in vmw_translate_ptr functions7.8 High
- linux, linux kernel +1 moresmb: client: fix oops due to uninitialised var in smb2_unlink()5.5 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions, uninitialized memory in the JavaScript Engine component9.1 Critical
- mozilla firefox, thunderbird +1 moreUninitialized memory in the Graphics: Canvas2D component9.1 Critical
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreStack memory disclosure in filemd5 command7.1 High
- openatom openharmonymultimedia_audio_standard has an insecure storage of sensitive information vulnerability6.5 Medium
- Show moreLoading…