CWE-908 · Use of Uninitialized Resource (page 4)
Page 4 of 9 — CVEs classified under CWE-908, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-9377 | Medium | 5.5 | 2024-11-28 | In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This could lead to local e… |
CVE-2017-18306 | High | 8.4 | 2024-11-26 | Information disclosure due to uninitialized variable. |
CVE-2024-53101 | Medium | 5.5 | 2024-11-25 | In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and from_kgid ocfs2_setattr() uses attr->i… |
CVE-2024-9717 | High | 7.8 | 2024-11-22 | Trimble SketchUp Viewer SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbi… |
CVE-2024-8842 | High | 7.8 | 2024-11-22 | PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary… |
CVE-2018-9421 | Medium | 5.5 | 2024-11-19 | In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could lead to local informa… |
CVE-2018-9420 | Medium | 5.5 | 2024-11-19 | In BnCameraService::onTransact of CameraService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information… |
CVE-2018-9346 | Medium | 5.5 | 2024-11-19 | In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local i… |
CVE-2018-9345 | Medium | 5.5 | 2024-11-19 | In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local i… |
CVE-2024-53083 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier If the read of USB_PDPHY_R… |
CVE-2024-53066 | Critical | 9.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: nfs: Fix KMSAN warning in decode_getfattr_attrs() Fix the following KMSAN warning: CPU… |
CVE-2024-50302 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds… |
CVE-2024-50300 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: regulator: rtq2208: Fix uninitialized use of regulator_config Fix rtq2208 driver uninitia… |
CVE-2024-50299 | High | 8.2 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: sctp: properly validate chunk size in sctp_sf_ootb() A size validation fix similar to tha… |
CVE-2024-50273 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: btrfs: reinitialize delayed ref list after deleting it from the list At insert_delayed_re… |
CVE-2024-49029 | High | 7.8 | 2024-11-12 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2024-50241 | High | 7.5 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Initialize struct nfsd4_copy earlier Ensure the refcount and async_copies fields ar… |
CVE-2024-50237 | High | 7.8 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower Avoid potentially… |
CVE-2024-50173 | High | 7.8 | 2024-11-08 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup() The group variabl… |
CVE-2024-50143 | High | 7.8 | 2024-11-07 | In the Linux kernel, the following vulnerability has been resolved: udf: fix uninit-value use in udf_get_fileshortad Check for overflow when computing alen i… |
CVE-2024-50110 | Medium | 5.5 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: xfrm: fix one more kernel-infoleak in algo dumping During fuzz testing, the following iss… |
CVE-2024-8896 | High | 7.8 | 2024-10-29 | A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can… |
CVE-2024-50035 | High | 7.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ppp: fix ppp_async_encode() illegal access syzbot reported an issue in ppp_async_encode()… |
CVE-2024-50033 | Critical | 9.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: slip: make slhc_remember() more robust against malicious packets syzbot found that slhc_r… |
CVE-2022-48949 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: igb: Initialize mailbox message for VF reset When a MAC address is not assigned to the VF… |
CVE-2024-50014 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix access to uninitialised lock in fc replay path The following kernel trace can b… |
CVE-2024-49990 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/hdcp: Check GSC structure validity Sometimes xe_gsc is not initialized when checke… |
CVE-2024-49900 | High | 7.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of new_ea in ea_buffer syzbot reports that lzo1x_1_do_compre… |
CVE-2024-47687 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix invalid mr resource destroy Certain error paths from mlx5_vdpa_dev_add() c… |
CVE-2024-47685 | Critical | 9.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() syzbot reported that nf_reject_… |
CVE-2024-47966 | High | 7.8 | 2024-10-10 | Delta Electronics CNCSoft-G2 lacks proper initialization of memory prior to accessing it. An attacker can manipulate users to visit a malicious page or file to… |
CVE-2024-43537 | Medium | 6.5 | 2024-10-08 | Windows Mobile Broadband Driver Denial of Service Vulnerability |
CVE-2024-43502 | High | 7.1 | 2024-10-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-46865 | Critical | 9.8 | 2024-09-27 | In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a condition… |
CVE-2024-7022 | Medium | 4.3 | 2024-09-23 | Uninitialized Use in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chro… |
CVE-2024-46784 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup Currently napi_disabl… |
CVE-2024-43458 | High | 7.7 | 2024-09-10 | Windows Networking Information Disclosure Vulnerability |
CVE-2024-38260 | High | 8.8 | 2024-09-10 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
CVE-2024-38257 | High | 7.5 | 2024-09-10 | Microsoft AllJoyn API Information Disclosure Vulnerability |
CVE-2024-38256 | Medium | 5.5 | 2024-09-10 | Windows Kernel-Mode Driver Information Disclosure Vulnerability |
CVE-2024-38254 | Medium | 5.5 | 2024-09-10 | Windows Authentication Information Disclosure Vulnerability |
CVE-2024-8654 | Medium | 5.0 | 2024-09-10 | MongoDB Server may access non-initialized region of memory leading to unexpected behaviour when zero arguments are called in internal aggregation stage. This i… |
CVE-2024-8178 | High | 8.8 | 2024-09-05 | The ctl_write_buffer and ctl_read_buffer functions allocated memory to be returned to userspace, without initializing it. Malicious software running in a gues… |
CVE-2024-45005 | Medium | 5.5 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: fix validity interception issue when gisa is switched off We might run into a… |
CVE-2024-44999 | High | 7.1 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: gtp: pull network headers in gtp_dev_xmit() syzbot/KMSAN reported use of uninit-value in… |
CVE-2024-44983 | High | 7.1 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: validate vlan header Ensure there is sufficient room to access the… |
CVE-2024-45618 | Low | 3.9 | 2024-09-03 | A vulnerability was found in pkcs15-init in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially c… |
CVE-2024-45617 | Low | 3.9 | 2024-09-03 | A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would p… |
CVE-2024-45616 | Low | 3.9 | 2024-09-03 | A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would p… |
CVE-2024-45615 | Low | 3.9 | 2024-09-03 | A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. The problem is missing initialization of variables expected to be ini… |
CVE-2024-43845 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: udf: Fix bogus checksum computation in udf_rename() Syzbot reports uninitialized memory a… |
CVE-2024-43815 | High | 7.1 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - Ensure payload is zero when using key slot We could leak stack memory t… |
CVE-2024-42312 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: sysctl: always initialize i_uid/i_gid Always initialize i_uid/i_gid inside the sysfs core… |
CVE-2024-42311 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() Syzbot reports un… |
CVE-2024-42283 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Initialize all fields in dumped nexthops struct nexthop_grp contains two re… |
CVE-2024-42272 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: sched: act_ct: take care of padding in struct zones_ht_key Blamed commit increased lookup… |
CVE-2024-7868 | High | 8.2 | 2024-08-15 | In Xpdf 4.05 (and earlier), invalid header info in a DCT (JPEG) stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file… |
CVE-2024-38122 | Medium | 5.5 | 2024-08-13 | Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability |
CVE-2024-38118 | Medium | 5.5 | 2024-08-13 | Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability |
CVE-2024-7526 | Medium | 6.5 | 2024-08-06 | ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. This vulnera… |
CVE-2024-7542 | Low | 3.3 | 2024-08-06 | oFono AT CMGR Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information… |
CVE-2024-7541 | Low | 3.3 | 2024-08-06 | oFono AT CMT Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information o… |
CVE-2024-7540 | Low | 3.3 | 2024-08-06 | oFono AT CMGL Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information… |
CVE-2024-33021 | High | 8.4 | 2024-08-05 | Memory corruption while processing IOCTL call to set metainfo. |
CVE-2024-6990 | High | 8.8 | 2024-08-01 | Uninitialized Use in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory access via a… |
CVE-2024-42228 | High | 7.0 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc Initialize t… |
CVE-2024-42225 | High | 8.3 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: replace skb_put with skb_put_zero Avoid potentially reusing uninitialized data |
CVE-2024-42161 | Medium | 6.3 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD [Changes from V1: - Use a defau… |
CVE-2024-42129 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: leds: mlxreg: Use devm_mutex_init() for mutex initialization In this driver LEDs are regi… |
CVE-2024-42128 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: leds: an30259a: Use devm_mutex_init() for mutex initialization In this driver LEDs are re… |
CVE-2024-42113 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: net: txgbe: initialize num_q_vectors for MSI/INTx interrupts When using MSI/INTx interrup… |
CVE-2024-42106 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: inet_diag: Initialize pad field in struct inet_diag_req_v2 KMSAN reported uninit-value ac… |
CVE-2024-42096 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: x86: stop playing stack games in profile_pc() The 'profile_pc()' function is used for tim… |
CVE-2024-42076 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: Initialize unused data in j1939_send_one() syzbot reported kernel-infole… |
CVE-2024-42063 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode syzbot reported u… |
CVE-2024-41059 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix uninit-value in copy_name [syzbot reported] BUG: KMSAN: uninit-value in size… |
CVE-2024-41052 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Init the count variable in collecting hot-reset devices The count variable is u… |
CVE-2022-48864 | High | 8.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command When control vq rec… |
CVE-2022-48807 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler Currently, the same handler is call… |
CVE-2024-40998 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() In the follow… |
CVE-2024-40931 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure snd_una is properly initialized on connect This is strictly related to comm… |
CVE-2024-40926 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: don't attempt to schedule hpd_work on headless cards If the card doesn't hav… |
CVE-2024-39507 | High | 7.0 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash problem in concurrent scenario When link status change, the n… |
CVE-2024-39491 | Medium | 5.5 | 2024-07-10 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l56: Fix lifetime of cs_dsp instance The cs_dsp instance is initialized in… |
CVE-2024-38064 | High | 7.5 | 2024-07-09 | Windows TCP/IP Information Disclosure Vulnerability |
CVE-2024-23159 | High | 7.8 | 2024-06-25 | A maliciously crafted STP file, when parsed in stp_aim_x64_vc15d.dll through Autodesk applications, can be used to uninitialized variables. This vulnerability… |
CVE-2024-37002 | High | 7.8 | 2024-06-25 | A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerability, alon… |
CVE-2024-38381 | High | 8.8 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in nci_rx_work syzbot reported the following uninit-value acce… |
CVE-2024-33619 | High | 7.8 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: efi: libstub: only free priv.runtime_map when allocated priv.runtime_map is only allocate… |
CVE-2022-48747 | High | 7.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: block: Fix wrong offset in bio_truncate() bio_truncate() clears the buffer outside of las… |
CVE-2024-38619 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The member "uzonesize" of str… |
CVE-2021-47597 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: inet_diag: fix kernel-infoleak for UDP sockets KMSAN reported a kernel-infoleak [1], that… |
CVE-2021-47583 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: media: mxl111sf: change mutex_init() location Syzbot reported, that mxl111sf_ctrl_msg() u… |
CVE-2024-38593 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: micrel: Fix receiving the timestamp in the frame for lan8841 The blamed commit start… |
CVE-2024-38592 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Init `ddp_comp` with devm_kcalloc() In the case where `conn_routes` is true… |
CVE-2024-38538 | High | 7.3 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: xmit: make sure we have at least eth header len bytes syzbot triggered an un… |
CVE-2024-36503 | High | 7.3 | 2024-06-14 | Memory management vulnerability in the Gralloc module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32910 | Medium | 5.5 | 2024-06-13 | In handle_msg_shm_map_req of trusty/user/base/lib/spi/srv/tipc/tipc.c, there is a possible stack data disclosure due to uninitialized data. This could lead to… |
CVE-2024-32906 | High | 7.8 | 2024-06-13 | In AcvpOnMessage of avcp.cpp, there is a possible EOP due to uninitialized data. This could lead to local escalation of privilege with no additional execution… |
CVE-2024-29785 | Medium | 5.5 | 2024-06-13 | In aur_get_state of aurora.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no add… |