CWE-908 · Use of Uninitialized Resource (page 4)
Page 4 of 9 — CVEs classified under CWE-908, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-21959 | High | 7.3 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() Sinc… |
CVE-2025-21922 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: ppp: Fix KMSAN uninit-value warning with bpf Syzbot caught an "KMSAN: uninit-value" warni… |
CVE-2025-21891 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: ipvlan: ensure network headers are in skb linear part syzbot found that ipvlan_process_v6… |
CVE-2025-27810 | Medium | 5.4 | 2025-03-25 | Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS… |
CVE-2025-1650 | High | 7.8 | 2025-03-13 | A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage… |
CVE-2025-1649 | High | 7.8 | 2025-03-13 | A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage… |
CVE-2025-1427 | High | 7.8 | 2025-03-13 | A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage… |
CVE-2025-21862 | Medium | 5.5 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix incorrect initialization order Syzkaller reports the following bug: BU… |
CVE-2025-2173 | Medium | 5.3 | 2025-03-11 | A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbi_strndup_iconv_ucs2 of the file src/conv… |
CVE-2025-21843 | Medium | 5.5 | 2025-03-07 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: avoid garbage value in panthor_ioctl_dev_query() 'priorities_info' is uninit… |
CVE-2025-27796 | Medium | 4.5 | 2025-03-07 | ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob. |
CVE-2025-1942 | Critical | 9.8 | 2025-03-04 | When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string. This vulnerability… |
CVE-2025-21824 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix a use of uninitialized mutex commit c8347f915e67 ("gpu: host1x: Fix boot… |
CVE-2025-21787 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: team: better TEAM_OPTION_TYPE_STRING validation syzbot reported following splat [1] Make… |
CVE-2025-21716 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix uninit-value in vxlan_vnifilter_dump() KMSAN reported an uninit-value access i… |
CVE-2025-21707 | Critical | 9.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: mptcp: consolidate suboption status MPTCP maintains the received sub-options status is th… |
CVE-2024-57997 | High | 8.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix channel survey memory allocation size KASAN reported a memory allocati… |
CVE-2022-49726 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: clocksource: hyper-v: unexport __init-annotated hv_init_clocksource() EXPORT_SYMBOL and _… |
CVE-2022-49675 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tick/nohz: unexport __init-annotated tick_nohz_full_setup() EXPORT_SYMBOL and __init is a… |
CVE-2022-49567 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix uninit-value in mpol_rebind_policy() mpol_set_nodemask()(mm/mempolicy.c… |
CVE-2022-49507 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: regulator: da9121: Fix uninit-value in da9121_assign_chip_model() KASAN report slab-out-o… |
CVE-2022-49433 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Prevent use of lock before it is initialized If there is a failure during prob… |
CVE-2022-49418 | Critical | 9.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix free of uninitialized nfs4_label on referral lookup. Send along the already-al… |
CVE-2022-49374 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tipc: check attribute length for bearer name syzbot reported uninit-value: ==============… |
CVE-2022-49350 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: net: mdio: unexport __init-annotated mdio_bus_init() EXPORT_SYMBOL and __init is a bad co… |
CVE-2022-49326 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: rtl818x: Prevent using not initialized queues Using not existing queues can panic the ker… |
CVE-2022-49301 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix uninit-value in usb_read8() and friends When r8712_usbctrl_vendorre… |
CVE-2022-49298 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix uninit-value in r871xu_drv_init() When 'tmpU1b' returns from r8712_… |
CVE-2022-49274 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix crash when mount with quota enabled There is a reported crash when mounting oc… |
CVE-2022-49248 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction AV/C deferred tr… |
CVE-2022-49235 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ath9k_htc: fix uninit value bugs Syzbot reported 2 KMSAN bugs in ath9k. All of them are c… |
CVE-2022-49200 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt Fix the following kernel oop… |
CVE-2022-49132 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ath11k: pci: fix crash on suspend if board file is not found Mario reported that the kern… |
CVE-2025-26803 | Medium | 5.3 | 2025-02-24 | The http parser in Phusion Passenger 6.0.21 through 6.0.25 before 6.0.26 allows a denial of service during parsing of a request with an invalid HTTP method. |
CVE-2025-20638 | Medium | 4.3 | 2025-02-03 | In DA, there is a possible read of uninitialized heap data due to uninitialized data. This could lead to local information disclosure, if an attacker has physi… |
CVE-2018-9378 | Medium | 6.2 | 2025-01-28 | In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local… |
CVE-2024-57912 | High | 7.1 | 2025-01-19 | In the Linux kernel, the following vulnerability has been resolved: iio: pressure: zpa2326: fix information leak in triggered buffer The 'sample' local struc… |
CVE-2024-57911 | High | 7.1 | 2025-01-19 | In the Linux kernel, the following vulnerability has been resolved: iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer The 'data'… |
CVE-2024-57910 | High | 7.1 | 2025-01-19 | In the Linux kernel, the following vulnerability has been resolved: iio: light: vcnl4035: fix information leak in triggered buffer The 'buffer' local array i… |
CVE-2024-57909 | High | 7.1 | 2025-01-19 | In the Linux kernel, the following vulnerability has been resolved: iio: light: bh1745: fix information leak in triggered buffer The 'scan' local struct is u… |
CVE-2024-57908 | High | 7.1 | 2025-01-19 | In the Linux kernel, the following vulnerability has been resolved: iio: imu: kmx61: fix information leak in triggered buffer The 'buffer' local array is use… |
CVE-2024-57907 | High | 7.1 | 2025-01-19 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: rockchip_saradc: fix information leak in triggered buffer The 'data' local stru… |
CVE-2024-57906 | High | 7.1 | 2025-01-19 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads8688: fix information leak in triggered buffer The 'buffer' local array i… |
CVE-2024-57905 | High | 7.1 | 2025-01-19 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1119: fix information leak in triggered buffer The 'scan' local struct is… |
CVE-2024-57802 | Critical | 9.4 | 2025-01-15 | In the Linux kernel, the following vulnerability has been resolved: netrom: check buffer length before accessing it Syzkaller reports an uninit value read fr… |
CVE-2025-21357 | Medium | 6.7 | 2025-01-14 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2025-21312 | Low | 2.4 | 2025-01-14 | Windows Smart Card Reader Information Disclosure Vulnerability |
CVE-2025-21288 | Medium | 6.5 | 2025-01-14 | Windows COM Server Information Disclosure Vulnerability |
CVE-2025-21272 | Medium | 6.5 | 2025-01-14 | Windows COM Server Information Disclosure Vulnerability |
CVE-2025-21220 | High | 7.5 | 2025-01-14 | Microsoft Message Queuing Information Disclosure Vulnerability |
CVE-2024-13164 | High | 7.8 | 2025-01-14 | An uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated att… |
CVE-2024-12085 | High | 7.5 | 2025-01-14 | A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length… |
CVE-2024-57878 | Medium | 6.1 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: arm64: ptrace: fix partial SETREGSET for NT_ARM_FPMR Currently fpmr_set() doesn't initial… |
CVE-2024-57877 | Medium | 6.1 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: arm64: ptrace: fix partial SETREGSET for NT_ARM_POE Currently poe_set() doesn't initializ… |
CVE-2024-57874 | Medium | 6.1 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL Currently tagged_addr_ct… |
CVE-2024-53680 | Medium | 5.5 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() Under certain ker… |
CVE-2024-56446 | Medium | 4.0 | 2025-01-08 | Vulnerability of variables not being initialized in the notification module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-56769 | Medium | 5.5 | 2025-01-06 | In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg Syzbot reports [1]… |
CVE-2024-56739 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() If the __rtc_read_tim… |
CVE-2024-56685 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: Check num_codecs is not zero to avoid panic during probe Following commit… |
CVE-2024-56677 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() During early in… |
CVE-2024-56648 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: hsr: avoid potential out-of-bound access in fill_frame_info() syzbot is able to feed… |
CVE-2024-56630 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: free inode when ocfs2_get_init_inode() fails syzbot is reporting busy inodes after… |
CVE-2024-53155 | High | 7.1 | 2024-12-24 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix uninitialized value in ocfs2_file_read_iter() Syzbot has reported the followin… |
CVE-2024-11364 | High | 7.3 | 2024-12-19 | Another “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and… |
CVE-2024-47540 | Critical | 9.8 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identified in the gst_matro… |
CVE-2024-11991 | Medium | 5.6 | 2024-12-09 | Motoko's incremental garbage collector is impacted by an uninitialized memory access bug, caused by incorrect use of write barriers in a few locations. This vu… |
CVE-2018-9429 | Medium | 6.5 | 2024-12-02 | In buildImageItemsIfPossible of ItemTable.cpp there is a possible out of bound read due to uninitialized data. This could lead to information disclosure with n… |
CVE-2018-9381 | High | 7.5 | 2024-12-02 | In gatts_process_read_by_type_req of gatt_sr.c, there is a possible information disclosure due to uninitialized data. This could lead to remote information dis… |
CVE-2018-9377 | Medium | 5.5 | 2024-11-28 | In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This could lead to local e… |
CVE-2017-18306 | High | 8.4 | 2024-11-26 | Information disclosure due to uninitialized variable. |
CVE-2024-53101 | Medium | 5.5 | 2024-11-25 | In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and from_kgid ocfs2_setattr() uses attr->i… |
CVE-2024-9717 | High | 7.8 | 2024-11-22 | Trimble SketchUp Viewer SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbi… |
CVE-2024-8842 | High | 7.8 | 2024-11-22 | PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary… |
CVE-2018-9421 | Medium | 5.5 | 2024-11-19 | In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could lead to local informa… |
CVE-2018-9420 | Medium | 5.5 | 2024-11-19 | In BnCameraService::onTransact of CameraService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information… |
CVE-2018-9346 | Medium | 5.5 | 2024-11-19 | In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local i… |
CVE-2018-9345 | Medium | 5.5 | 2024-11-19 | In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local i… |
CVE-2024-53083 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier If the read of USB_PDPHY_R… |
CVE-2024-53066 | Critical | 9.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: nfs: Fix KMSAN warning in decode_getfattr_attrs() Fix the following KMSAN warning: CPU… |
CVE-2024-50302 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds… |
CVE-2024-50300 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: regulator: rtq2208: Fix uninitialized use of regulator_config Fix rtq2208 driver uninitia… |
CVE-2024-50299 | High | 8.2 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: sctp: properly validate chunk size in sctp_sf_ootb() A size validation fix similar to tha… |
CVE-2024-50273 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: btrfs: reinitialize delayed ref list after deleting it from the list At insert_delayed_re… |
CVE-2024-49029 | High | 7.8 | 2024-11-12 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2024-50241 | High | 7.5 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Initialize struct nfsd4_copy earlier Ensure the refcount and async_copies fields ar… |
CVE-2024-50237 | High | 7.8 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower Avoid potentially… |
CVE-2024-50173 | High | 7.8 | 2024-11-08 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup() The group variabl… |
CVE-2024-50143 | High | 7.8 | 2024-11-07 | In the Linux kernel, the following vulnerability has been resolved: udf: fix uninit-value use in udf_get_fileshortad Check for overflow when computing alen i… |
CVE-2024-50110 | Medium | 5.5 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: xfrm: fix one more kernel-infoleak in algo dumping During fuzz testing, the following iss… |
CVE-2024-8896 | High | 7.8 | 2024-10-29 | A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can… |
CVE-2024-50035 | High | 7.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ppp: fix ppp_async_encode() illegal access syzbot reported an issue in ppp_async_encode()… |
CVE-2024-50033 | Critical | 9.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: slip: make slhc_remember() more robust against malicious packets syzbot found that slhc_r… |
CVE-2022-48949 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: igb: Initialize mailbox message for VF reset When a MAC address is not assigned to the VF… |
CVE-2024-50014 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix access to uninitialised lock in fc replay path The following kernel trace can b… |
CVE-2024-49990 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/hdcp: Check GSC structure validity Sometimes xe_gsc is not initialized when checke… |
CVE-2024-49900 | High | 7.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of new_ea in ea_buffer syzbot reports that lzo1x_1_do_compre… |
CVE-2024-47687 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix invalid mr resource destroy Certain error paths from mlx5_vdpa_dev_add() c… |
CVE-2024-47685 | Critical | 9.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() syzbot reported that nf_reject_… |
CVE-2024-47966 | High | 7.8 | 2024-10-10 | Delta Electronics CNCSoft-G2 lacks proper initialization of memory prior to accessing it. An attacker can manipulate users to visit a malicious page or file to… |