CWE-909: Missing Initialization of Resource
The product does not initialize a critical resource.
A kind of CWE-665 Improper Initialization.
From the CWE List. © The MITRE Corporation.
Newest
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn Eclipse Openj9 to version 0.25.0, usage of the jdk.internal.reflect.ConstantPool API causes...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out...8.8 High
- cisco clamav, debian linux +1 moreClam AntiVirus (ClamAV) PDF Parser Denial of Service Vulnerability7.5 High
- xenHVM soft-reset crashes toolstack libxl requires all data structures passed across its public...5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in the Linux kernel before 5.11.11. qrtr_recvmsg in net/qrtr/qrtr.c...5.5 Medium
- freebsdIn FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1...5.3 Medium
- opendoas project opendoasThere is an unsafe incomplete reset of PATH in OpenDoas 6.6 through 6.8 when changing the user...8.8 High
- array-tools project array-toolsMemory corruption in array-tools9.8 Critical
- innominate mguard rs4000 4tx/3g/tx vpn, mguard rs4000 4tx/tx, mguard rs4000 4tx/tx vpn +15 more +17 morePhoenix Contact mGuard Devices versions before 8.8.3: LAN ports get functional after reboot even if they are disabled in the device configuration5.4 Medium
- google androidIn ihevc_inter_pred_chroma_copy_ssse3 of ihevc_inter_pred_filters_ssse3_intr.c, there is a...6.5 Medium
- libvips, debian linux, fedoraproject fedora +2 moreim_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an...5.3 Medium
- fedoraproject fedora, tpm2 software stack project software stack +1 moreMissing initialization of a variable in the TPM2 source may allow a privileged user to...6.7 Medium
- google androidIn the AIBinder_Class constructor of ibinder.cpp, there is a possible arbitrary code execution...7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +8 more +10 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- bluez, linux kernel +1 morelinux-4.19 - security update6.5 Medium
- google androidIn libcodec2_soft_mp3dec, there is a possible information disclosure due to uninitialized data....6.5 Medium
- google androidIn the mp3 extractor, there is a possible out of bounds write due to uninitialized data. This...8.8 High
- huawei moana-al00b, moana-al00b firmware +1 moreHuawei Smart Phones Moana-AL00B with versions earlier than 10.1.0.166 have a missing...5.5 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +19 more +21 moreAn information disclosure vulnerability exists when the Windows kernel fails to properly...5.5 Medium
- google androidIn ihevcd_iquant_itrans_recon_ctb of ihevcd_iquant_itrans_recon_ctb.c and related functions,...6.5 Medium
- google androidIn BnDrm::onTransact of IDrm.cpp, there is a possible information disclosure due to uninitialized...5.5 Medium
- meetecho janusAn issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0....7.5 High
- google androidIn BnCrypto::onTransact of ICrypto.cpp, there is a possible information disclosure due to...5.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (with active...8.8 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel through 5.6.2....4.4 Medium
- mozilla thunderbird, canonical ubuntu linux +1 moreWhen deriving an identifier for an email message, uninitialized memory was used in addition to...4.3 Medium
- wireshark, debian linux, opensuse leap +2 more +4 moreIn Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was...7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreIn the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious...2.4 Low
- debian linux, linux kernel, opensuse leap +1 more +3 moreIn the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB...4.6 Medium
- debian linux, linux kernel, opensuse leap +2 moreIn the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB...4.6 Medium
- apache arrowMissing Initialization of Resource in Apache Arrow7.5 High
- apache arrowMissing Initialization of Resource in Apache Arrow7.5 High
- google androidIn libavc, there is a missing variable initialization. This could lead to remote information...6.5 Medium
- google androidIn libavc, there is a missing variable initialization. This could lead to remote information...6.5 Medium
- google androidIn libavc, there is a missing variable initialization. This could lead to remote information...6.5 Medium
- google androidIn libhevc, there is a missing variable initialization. This could lead to remote information...6.5 Medium
- google androidIn libstagefright, there is a missing variable initialization. This could lead to remote...6.5 Medium
- google androidIn libstagefright, there is a missing variable initialization. This could lead to remote...6.5 Medium
- google androidIn libhevc, there is a missing variable initialization. This could lead to remote information...6.5 Medium
- google androidIn libavc, there is a missing variable initialization. This could lead to remote information...6.5 Medium
- google androidIn libstagefright, there is a missing variable initialization. This could lead to remote...6.5 Medium
- google androidIn AAC Codec, there is a missing variable initialization. This could lead to remote information...6.5 Medium
- linux kernel, canonical ubuntu linux, f5 traffix signaling delivery controller +2 moreIn the Linux kernel before 5.2.14, rds6_inc_info_copy in net/rds/recv.c allows attackers to...7.5 High
- pnet project pnetMissing Initialization of Resource in pnet7.5 High
- [unknown] cockpit, fedoraproject fedora, redhat virtualization +2 moreIt was found that cockpit before version 184 used glib's base64 decode functionality incorrectly...7.5 High
- php, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 High
- libvnc project libvncserver, canonical ubuntu linux, debian linux +7 more +9 moreAn issue was discovered in LibVNCServer before 0.9.13. There is a memory leak in the libvncclient...7.5 High
- tcpdumpIn tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print...5.5 Medium
- google androidIn ipSecSetEncapSocketOwner of XfrmController.cpp, there is a possible failure to initialize a...5.5 Medium
- python, canonical ubuntu linux, debian linux +5 more +7 morePython's elementtree C accelerator failed to initialise Expat's hash salt during initialization....5.3 Medium
- Show moreLoading…