CWE-908 · Use of Uninitialized Resource (page 5)
Page 5 of 9 — CVEs classified under CWE-908, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-43537 | Medium | 6.5 | 2024-10-08 | Windows Mobile Broadband Driver Denial of Service Vulnerability |
CVE-2024-43502 | High | 7.1 | 2024-10-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-46865 | Critical | 9.8 | 2024-09-27 | In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a condition… |
CVE-2024-7022 | Medium | 4.3 | 2024-09-23 | Uninitialized Use in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chro… |
CVE-2024-46784 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup Currently napi_disabl… |
CVE-2024-43458 | High | 7.7 | 2024-09-10 | Windows Networking Information Disclosure Vulnerability |
CVE-2024-38260 | High | 8.8 | 2024-09-10 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
CVE-2024-38257 | High | 7.5 | 2024-09-10 | Microsoft AllJoyn API Information Disclosure Vulnerability |
CVE-2024-38256 | Medium | 5.5 | 2024-09-10 | Windows Kernel-Mode Driver Information Disclosure Vulnerability |
CVE-2024-38254 | Medium | 5.5 | 2024-09-10 | Windows Authentication Information Disclosure Vulnerability |
CVE-2024-8654 | Medium | 5.0 | 2024-09-10 | MongoDB Server may access non-initialized region of memory leading to unexpected behaviour when zero arguments are called in internal aggregation stage. This i… |
CVE-2024-8178 | High | 8.8 | 2024-09-05 | The ctl_write_buffer and ctl_read_buffer functions allocated memory to be returned to userspace, without initializing it. Malicious software running in a gues… |
CVE-2024-45005 | Medium | 5.5 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: fix validity interception issue when gisa is switched off We might run into a… |
CVE-2024-44999 | High | 7.1 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: gtp: pull network headers in gtp_dev_xmit() syzbot/KMSAN reported use of uninit-value in… |
CVE-2024-44983 | High | 7.1 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: validate vlan header Ensure there is sufficient room to access the… |
CVE-2024-45618 | Low | 3.9 | 2024-09-03 | A vulnerability was found in pkcs15-init in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially c… |
CVE-2024-45617 | Low | 3.9 | 2024-09-03 | A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would p… |
CVE-2024-45616 | Low | 3.9 | 2024-09-03 | A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would p… |
CVE-2024-45615 | Low | 3.9 | 2024-09-03 | A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. The problem is missing initialization of variables expected to be ini… |
CVE-2024-43845 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: udf: Fix bogus checksum computation in udf_rename() Syzbot reports uninitialized memory a… |
CVE-2024-43815 | High | 7.1 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - Ensure payload is zero when using key slot We could leak stack memory t… |
CVE-2024-42312 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: sysctl: always initialize i_uid/i_gid Always initialize i_uid/i_gid inside the sysfs core… |
CVE-2024-42311 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() Syzbot reports un… |
CVE-2024-42283 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Initialize all fields in dumped nexthops struct nexthop_grp contains two re… |
CVE-2024-42272 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: sched: act_ct: take care of padding in struct zones_ht_key Blamed commit increased lookup… |
CVE-2024-7868 | High | 8.2 | 2024-08-15 | In Xpdf 4.05 (and earlier), invalid header info in a DCT (JPEG) stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file… |
CVE-2024-38122 | Medium | 5.5 | 2024-08-13 | Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability |
CVE-2024-38118 | Medium | 5.5 | 2024-08-13 | Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability |
CVE-2024-7526 | Medium | 6.5 | 2024-08-06 | ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. This vulnera… |
CVE-2024-7542 | Low | 3.3 | 2024-08-06 | oFono AT CMGR Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information… |
CVE-2024-7541 | Low | 3.3 | 2024-08-06 | oFono AT CMT Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information o… |
CVE-2024-7540 | Low | 3.3 | 2024-08-06 | oFono AT CMGL Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information… |
CVE-2024-33021 | High | 8.4 | 2024-08-05 | Memory corruption while processing IOCTL call to set metainfo. |
CVE-2024-6990 | High | 8.8 | 2024-08-01 | Uninitialized Use in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory access via a… |
CVE-2024-42228 | High | 7.0 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc Initialize t… |
CVE-2024-42225 | High | 8.3 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: replace skb_put with skb_put_zero Avoid potentially reusing uninitialized data |
CVE-2024-42161 | Medium | 6.3 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD [Changes from V1: - Use a defau… |
CVE-2024-42129 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: leds: mlxreg: Use devm_mutex_init() for mutex initialization In this driver LEDs are regi… |
CVE-2024-42128 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: leds: an30259a: Use devm_mutex_init() for mutex initialization In this driver LEDs are re… |
CVE-2024-42113 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: net: txgbe: initialize num_q_vectors for MSI/INTx interrupts When using MSI/INTx interrup… |
CVE-2024-42106 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: inet_diag: Initialize pad field in struct inet_diag_req_v2 KMSAN reported uninit-value ac… |
CVE-2024-42096 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: x86: stop playing stack games in profile_pc() The 'profile_pc()' function is used for tim… |
CVE-2024-42076 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: Initialize unused data in j1939_send_one() syzbot reported kernel-infole… |
CVE-2024-42063 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode syzbot reported u… |
CVE-2024-41059 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix uninit-value in copy_name [syzbot reported] BUG: KMSAN: uninit-value in size… |
CVE-2024-41052 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Init the count variable in collecting hot-reset devices The count variable is u… |
CVE-2022-48864 | High | 8.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command When control vq rec… |
CVE-2022-48807 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler Currently, the same handler is call… |
CVE-2024-40998 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() In the follow… |
CVE-2024-40931 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure snd_una is properly initialized on connect This is strictly related to comm… |
CVE-2024-40926 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: don't attempt to schedule hpd_work on headless cards If the card doesn't hav… |
CVE-2024-39507 | High | 7.0 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash problem in concurrent scenario When link status change, the n… |
CVE-2024-39491 | Medium | 5.5 | 2024-07-10 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l56: Fix lifetime of cs_dsp instance The cs_dsp instance is initialized in… |
CVE-2024-38064 | High | 7.5 | 2024-07-09 | Windows TCP/IP Information Disclosure Vulnerability |
CVE-2024-23159 | High | 7.8 | 2024-06-25 | A maliciously crafted STP file, when parsed in stp_aim_x64_vc15d.dll through Autodesk applications, can be used to uninitialized variables. This vulnerability… |
CVE-2024-37002 | High | 7.8 | 2024-06-25 | A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerability, alon… |
CVE-2024-38381 | High | 8.8 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in nci_rx_work syzbot reported the following uninit-value acce… |
CVE-2024-33619 | High | 7.8 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: efi: libstub: only free priv.runtime_map when allocated priv.runtime_map is only allocate… |
CVE-2022-48747 | High | 7.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: block: Fix wrong offset in bio_truncate() bio_truncate() clears the buffer outside of las… |
CVE-2024-38619 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The member "uzonesize" of str… |
CVE-2021-47597 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: inet_diag: fix kernel-infoleak for UDP sockets KMSAN reported a kernel-infoleak [1], that… |
CVE-2021-47583 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: media: mxl111sf: change mutex_init() location Syzbot reported, that mxl111sf_ctrl_msg() u… |
CVE-2024-38593 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: micrel: Fix receiving the timestamp in the frame for lan8841 The blamed commit start… |
CVE-2024-38592 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Init `ddp_comp` with devm_kcalloc() In the case where `conn_routes` is true… |
CVE-2024-38538 | High | 7.3 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: xmit: make sure we have at least eth header len bytes syzbot triggered an un… |
CVE-2024-36503 | High | 7.3 | 2024-06-14 | Memory management vulnerability in the Gralloc module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32910 | Medium | 5.5 | 2024-06-13 | In handle_msg_shm_map_req of trusty/user/base/lib/spi/srv/tipc/tipc.c, there is a possible stack data disclosure due to uninitialized data. This could lead to… |
CVE-2024-32906 | High | 7.8 | 2024-06-13 | In AcvpOnMessage of avcp.cpp, there is a possible EOP due to uninitialized data. This could lead to local escalation of privilege with no additional execution… |
CVE-2024-29785 | Medium | 5.5 | 2024-06-13 | In aur_get_state of aurora.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no add… |
CVE-2024-29780 | Medium | 5.5 | 2024-06-13 | In hwbcc_ns_deprivilege of trusty/user/base/lib/hwbcc/client/hwbcc.c, there is a possible uninitialized stack data disclosure due to uninitialized data. This c… |
CVE-2024-36454 | Medium | 5.3 | 2024-06-12 | Use of uninitialized resource issue exists in IPCOM EX2 Series (V01L0x Series) V01L07NF0201 and earlier, and IPCOM VE2 Series V01L07NF0201 and earlier. If this… |
CVE-2024-36933 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). syzbo… |
CVE-2024-36927 | Medium | 4.7 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access in __ip_make_skb() KMSAN reported uninit-value access in __… |
CVE-2024-36903 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix potential uninit-value access in __ip6_make_skb() As it was done in commit fc10… |
CVE-2024-36900 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when devlink reload during initialization The devlink reload… |
CVE-2024-36898 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: fix uninitialised kfifo If a line is requested with debounce, and that res… |
CVE-2024-36021 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when devlink reload during pf initialization The devlink relo… |
CVE-2024-36020 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: i40e: fix vf may be used uninitialized in this function warning To fix the regression int… |
CVE-2021-47554 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: vdpa_sim: avoid putting an uninitialized iova_domain The system will crash if we put an u… |
CVE-2021-47553 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: sched/scs: Reset task stack state in bringup_cpu() To hot unplug a CPU, the idle task on… |
CVE-2021-47462 | Medium | 5.5 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind() syzbot r… |
CVE-2021-47451 | High | 7.8 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value Currentl… |
CVE-2021-47446 | High | 7.8 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/a4xx: fix error handling in a4xx_gpu_init() This code returns 1 on error instead… |
CVE-2023-52845 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING syzbot reported the fo… |
CVE-2023-52843 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: llc: verify mac len before reading mac header LLC reads the mac header with eth_hdr witho… |
CVE-2023-52842 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt() KMSAN reported the followin… |
CVE-2023-52792 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Do not try to cleanup after cxl_region_setup_targets() fails Commit 5e42bcbc3… |
CVE-2023-52703 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path syzbot reported that act_l… |
CVE-2021-47424 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: i40e: Fix freeing of uninitialized misc IRQ vector When VSI set up failed in i40e_probe()… |
CVE-2021-47339 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-core: explicitly clear ioctl input data As seen from a recent syzbot bug repo… |
CVE-2021-47297 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net: fix uninit-value in caif_seqpkt_sendmsg When nr_segs equal to zero in iovec_from_use… |
CVE-2024-35973 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: geneve: fix header validation in geneve[6]_xmit_skb syzbot is able to trigger an uninit-v… |
CVE-2024-35915 | High | 8.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet syzbot reported the following… |
CVE-2024-35893 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_skbmod: prevent kernel-infoleak syzbot found that tcf_skbmod_dump() was co… |
CVE-2024-35888 | High | 7.3 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: erspan: make sure erspan_base_hdr is present in skb->head syzbot reported a problem in ip… |
CVE-2024-35849 | High | 7.1 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix information leak in btrfs_ioctl_logical_to_ino() Syzbot reported the following… |
CVE-2024-27431 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: cpumap: Zero-initialise xdp_rxq_info struct before running XDP program When running an XD… |
CVE-2023-6324 | High | 8.1 | 2024-05-15 | ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity |
CVE-2024-32611 | Critical | 9.8 | 2024-05-14 | HDF5 Library through 1.14.3 may use an uninitialized value in H5A__attr_release_table in H5Aint.c. |
CVE-2024-32606 | Medium | 5.7 | 2024-05-14 | HDF5 Library through 1.14.3 may attempt to dereference uninitialized values in h5tools_str_sprint in tools/lib/h5tools_str.c (called from h5tools_dump_simple_d… |