CWE-908 · Use of Uninitialized Resource (page 7)
Page 7 of 9 — CVEs classified under CWE-908, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-32745 | High | 8.1 | 2022-08-25 | A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segm… |
CVE-2021-0887 | Medium | 5.5 | 2022-08-24 | In PVRSRVBridgeHeapCfgHeapConfigName, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local information disclosur… |
CVE-2021-0698 | Medium | 5.5 | 2022-08-24 | In PVRSRVBridgeHeapCfgHeapDetails, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local information disclosure w… |
CVE-2022-38668 | High | 7.5 | 2022-08-22 | HTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack memory when fulfilling a request for a s… |
CVE-2020-27795 | High | 7.5 | 2022-08-19 | A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when command "adf" has no or wrong argument, anal_fcn_data (core, inp… |
CVE-2022-20357 | Medium | 5.5 | 2022-08-10 | In writeToParcel of SurfaceControl.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure w… |
CVE-2022-33716 | Low | 2.3 | 2022-08-05 | An absence of variable initialization in ICCC TA prior to SMR Aug-2022 Release 1 allows local attacker to read uninitialized memory. |
CVE-2022-34655 | High | 7.5 | 2022-08-04 | In BIG-IP Versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when an iRule containing the HTTP::payload command is configured o… |
CVE-2022-26437 | Critical | 9.8 | 2022-08-01 | In httpclient, there is a possible out of bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional executio… |
CVE-2022-34266 | Medium | 5.5 | 2022-07-19 | The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service (application crash), a different vulnerabili… |
CVE-2022-35414 | High | 8.8 | 2022-07-11 | softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash. NOTE: a third… |
CVE-2021-3435 | Medium | 4.0 | 2022-06-28 | Information leakage in le_ecred_conn_req(). Zephyr versions >= v2.4.0 Use of Uninitialized Resource (CWE-908). For more information, see https://github.com/zep… |
CVE-2021-40608 | Medium | 5.5 | 2022-06-28 | The gf_hinter_track_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command. |
CVE-2022-25345 | High | 7.5 | 2022-06-17 | All versions of package @discordjs/opus are vulnerable to Denial of Service (DoS) when trying to encode using an encoder with zero channels, or a non-initializ… |
CVE-2022-20176 | Medium | 4.4 | 2022-06-15 | In auth_store of sjtag-driver.c, there is a possible read of uninitialized memory due to a missing bounds check. This could lead to local information disclosur… |
CVE-2022-31026 | Medium | 5.9 | 2022-06-09 | Trilogy is a client library for MySQL. When authenticating, a malicious server could return a specially crafted authentication packet, causing the client to re… |
CVE-2022-29205 | Medium | 5.5 | 2022-05-20 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, there is a potential for segfault / denial of ser… |
CVE-2022-20119 | Medium | 5.5 | 2022-05-10 | In private_handle_t of mali_gralloc_buffer.h, there is a possible information disclosure due to uninitialized data. This could lead to local information disclo… |
CVE-2022-20008 | Medium | 4.6 | 2022-05-10 | In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to uninitialized data. This could lead to local information disclosur… |
CVE-2022-26370 | Medium | 5.9 | 2022-05-05 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, and 14.1.x versions prior to 14.1.4.6, when a Session Initiation Protocol (SIP… |
CVE-2022-28488 | High | 7.5 | 2022-05-04 | The function wav_format_write in libwav.c in libwav through 2017-04-20 has an Use of Uninitialized Variable vulnerability. |
CVE-2022-20096 | Medium | 4.4 | 2022-05-03 | In camera, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileg… |
CVE-2021-41041 | Medium | 5.3 | 2022-04-27 | In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a Meth… |
CVE-2022-20079 | Medium | 4.4 | 2022-04-11 | In vow, there is a possible read of uninitialized data due to a improper input validation. This could lead to local information disclosure with System executio… |
CVE-2022-0494 | Medium | 4.4 | 2022-03-25 | A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker wi… |
CVE-2022-0433 | Medium | 5.5 | 2022-03-10 | A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the map_get_next_key function of the BPF bloom filter… |
CVE-2021-21966 | Medium | 5.3 | 2022-02-16 | An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A speci… |
CVE-2022-0115 | High | 8.8 | 2022-02-12 | Uninitialized use in File API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially perform out of bounds memory access via a crafted… |
CVE-2021-39671 | Medium | 6.5 | 2022-02-11 | In code generated by aidl_const_expressions.cpp, there is a possible out of bounds read due to uninitialized data. This could lead to information disclosure wi… |
CVE-2022-23573 | High | 7.6 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `AssignOp` can result in copying uninitialized data to a new tensor. This later… |
CVE-2022-24448 | Low | 3.3 | 2022-02-04 | An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_a… |
CVE-2021-43848 | High | 7.4 | 2022-02-01 | h2o is an open source http server. In code prior to the `8c0eca3` commit h2o may attempt to access uninitialized memory. When receiving QUIC frames in certain… |
CVE-2021-39680 | Medium | 4.4 | 2022-01-14 | In sec_SHA256_Transform of sha256_core.c, there is a possible way to read heap data due to uninitialized data. This could lead to local information disclosure… |
CVE-2022-20018 | Medium | 4.4 | 2022-01-04 | In seninf driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution p… |
CVE-2022-20015 | Medium | 4.4 | 2022-01-04 | In kd_camera_hw driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execu… |
CVE-2021-45703 | Critical | 9.8 | 2021-12-27 | An issue was discovered in the tectonic_xdv crate before 0.1.12 for Rust. XdvParser::<T>::process may read from uninitialized memory locations. |
CVE-2021-45694 | High | 7.5 | 2021-12-27 | An issue was discovered in the rdiff crate through 2021-02-03 for Rust. Window may read from uninitialized memory locations. |
CVE-2021-45693 | Critical | 9.8 | 2021-12-27 | An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserialize_string_primitive may read from uninitialized memory locations. |
CVE-2021-45692 | Critical | 9.8 | 2021-12-27 | An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserialize_extension_others may read from uninitialized memory locations. |
CVE-2021-45691 | Critical | 9.8 | 2021-12-27 | An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserialize_string may read from uninitialized memory locations. |
CVE-2021-45690 | Critical | 9.8 | 2021-12-27 | An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserialize_binary may read from uninitialized memory locations. |
CVE-2021-45689 | Critical | 9.8 | 2021-12-27 | An issue was discovered in the gfx-auxil crate through 2021-01-07 for Rust. gfx_auxil::read_spirv may read from uninitialized memory locations. |
CVE-2021-45688 | Critical | 9.8 | 2021-12-27 | An issue was discovered in the ash crate before 0.33.1 for Rust. util::read_spv may read from uninitialized memory locations. |
CVE-2021-45686 | Critical | 9.8 | 2021-12-27 | An issue was discovered in the csv-sniffer crate through 2021-01-05 for Rust. preamble_skipcount may read from uninitialized memory locations. |
CVE-2021-45685 | Critical | 9.8 | 2021-12-27 | An issue was discovered in the columnar crate through 2021-01-07 for Rust. ColumnarReadExt::read_typed_vec may read from uninitialized memory locations. |
CVE-2021-45684 | Critical | 9.8 | 2021-12-27 | An issue was discovered in the flumedb crate through 2021-01-07 for Rust. read_entry may read from uninitialized memory locations. |
CVE-2021-45683 | Critical | 9.8 | 2021-12-27 | An issue was discovered in the binjs_io crate through 2021-01-03 for Rust. The Read method may read from uninitialized memory locations. |
CVE-2021-45682 | Critical | 9.8 | 2021-12-27 | An issue was discovered in the bronzedb-protocol crate through 2021-01-03 for Rust. ReadKVExt may read from uninitialized memory locations. |
CVE-2020-36514 | Critical | 9.8 | 2021-12-27 | An issue was discovered in the acc_reader crate through 2020-12-27 for Rust. fill_buf may read from uninitialized memory locations. |
CVE-2020-36513 | Critical | 9.8 | 2021-12-27 | An issue was discovered in the acc_reader crate through 2020-12-27 for Rust. read_up_to may read from uninitialized memory locations. |
CVE-2020-36512 | Critical | 9.8 | 2021-12-27 | An issue was discovered in the buffoon crate through 2020-12-31 for Rust. InputStream::read_exact may read from uninitialized memory locations. |
CVE-2020-36511 | High | 7.5 | 2021-12-27 | An issue was discovered in the bite crate through 2020-12-31 for Rust. read::BiteReadExpandedExt::read_framed_max may read from uninitialized memory locations. |
CVE-2018-25023 | High | 7.5 | 2021-12-27 | An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including a reference type. |
CVE-2021-40418 | Critical | 9.8 | 2021-12-22 | When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property containing an objec… |
CVE-2021-44003 | Medium | 5.5 | 2021-12-14 | A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable… |
CVE-2021-41253 | Medium | 5.9 | 2021-11-08 | Zydis is an x86/x86-64 disassembler library. Users of Zydis versions v3.2.0 and older that use the string functions provided in `zycore` in order to append unt… |
CVE-2021-41225 | Medium | 5.5 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions TensorFlow's Grappler optimizer has a use of unitialized variable. If the `tra… |
CVE-2021-3928 | High | 7.8 | 2021-11-05 | vim is vulnerable to Use of Uninitialized Variable |
CVE-2021-34855 | Medium | 6.5 | 2021-10-25 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.1.3 (49160). An attacker must fir… |
CVE-2021-0938 | Medium | 5.5 | 2021-10-25 | In memzero_explicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This could lead to local information disclos… |
CVE-2021-0634 | Medium | 6.7 | 2021-10-25 | In display driver, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege with System execution priv… |
CVE-2021-36512 | High | 7.5 | 2021-10-19 | An issue was discovered in function scanallsubs in src/sbbs3/scansubs.cpp in Synchronet BBS, which may allow attackers to view sensitive information due to an… |
CVE-2021-1619 | Critical | 9.8 | 2021-09-23 | A vulnerability in the authentication, authorization, and accounting (AAA) function of Cisco IOS XE Software could allow an unauthenticated, remote attacker to… |
CVE-2021-29631 | High | 7.8 | 2021-08-30 | In FreeBSD 13.0-STABLE before n246941-20f96f215562, 12.2-STABLE before r370400, 11.4-STABLE before r370399, 13.0-RELEASE before p4, 12.2-RELEASE before p10, an… |
CVE-2021-36007 | Low | 3.3 | 2021-08-20 | Adobe Prelude version 10.0 (and earlier) are affected by an uninitialized variable vulnerability when parsing a specially crafted file. An unauthenticated atta… |
CVE-2021-21781 | Low | 3.3 | 2021-08-18 | An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version (5.11-rc4) seems to sti… |
CVE-2021-36282 | Low | 2.5 | 2021-08-16 | Dell EMC PowerScale OneFS versions 8.2.x - 9.1.0.x contain a use of uninitialized resource vulnerability. This can potentially allow an authenticated user with… |
CVE-2021-1104 | Critical | 9.8 | 2021-08-13 | The RISC-V Instruction Set Manual contains a documented ambiguity for the Machine Trap Vector Base Address (MTVEC) register that may lead to a vulnerability du… |
CVE-2021-37682 | Medium | 4.4 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions all TFLite operations that use quantization can be made to use unit… |
CVE-2020-36452 | Critical | 9.8 | 2021-08-08 | An issue was discovered in the array-tools crate before 0.3.2 for Rust. FixedCapacityDequeLike::clone() has a drop of uninitialized memory. |
CVE-2020-36443 | Critical | 9.8 | 2021-08-08 | An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::poll_read(), which is a user-provid… |
CVE-2020-36432 | Critical | 9.8 | 2021-08-08 | An issue was discovered in the alg_ds crate through 2020-08-25 for Rust. There is a drop of uninitialized memory in Matrix::new(). |
CVE-2021-22925 | Medium | 5.3 | 2021-08-05 | curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used to send variable=content pairs toTELNET… |
CVE-2021-30578 | High | 8.8 | 2021-08-03 | Uninitialized use in Media in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. |
CVE-2021-0530 | High | 7.8 | 2021-06-21 | In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with no additi… |
CVE-2021-0526 | High | 7.8 | 2021-06-21 | In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with no additi… |
CVE-2021-0495 | High | 7.8 | 2021-06-11 | In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with no additi… |
CVE-2021-0473 | High | 8.8 | 2021-06-11 | In rw_t3t_process_error of rw_t3t.cc, there is a possible double free due to uninitialized data. This could lead to remote code execution over NFC with no addi… |
CVE-2020-11260 | High | 8.4 | 2021-06-09 | An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile |
CVE-2021-3545 | Medium | 6.5 | 2021-06-02 | An information disclosure vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw ex… |
CVE-2018-25014 | Critical | 9.8 | 2021-05-21 | A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol(). |
CVE-2021-29581 | Low | 2.5 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in `tf.raw_ops.CTCBeamSearchDecoder`, an attacker can trigger… |
CVE-2021-29580 | Low | 2.5 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. The implementation of `tf.raw_ops.FractionalMaxPoolGrad` triggers an undefined behavior… |
CVE-2021-29623 | Low | 3.6 | 2021-05-13 | Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A read of uninitialized memory was… |
CVE-2021-31423 | Medium | 6.0 | 2021-04-29 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first… |
CVE-2021-31419 | Medium | 6.5 | 2021-04-29 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-47270. An attacker must first… |
CVE-2021-31418 | Medium | 6.5 | 2021-04-29 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-47270. An attacker must first… |
CVE-2021-31417 | Medium | 6.5 | 2021-04-29 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-47270. An attacker must first… |
CVE-2021-30027 | Medium | 5.5 | 2021-04-29 | md_analyze_line in md4c.c in md4c 0.4.7 allows attackers to trigger use of uninitialized memory, and cause a denial of service via a malformed Markdown documen… |
CVE-2021-21218 | Medium | 5.5 | 2021-04-26 | Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory v… |
CVE-2021-29937 | Critical | 9.8 | 2021-04-01 | An issue was discovered in the telemetry crate through 2021-02-17 for Rust. There is a drop of uninitialized memory if a value.clone() call panics within misc… |
CVE-2021-29936 | Critical | 9.8 | 2021-04-01 | An issue was discovered in the adtensor crate through 2021-01-11 for Rust. There is a drop of uninitialized memory via the FromIterator implementation for Vect… |
CVE-2021-29934 | High | 7.3 | 2021-04-01 | An issue was discovered in PartialReader in the uu_od crate before 0.0.4 for Rust. Attackers can read the contents of uninitialized memory locations via a user… |
CVE-2021-0463 | Medium | 5.5 | 2021-03-10 | In convertToHidl of convert.cpp, there is a possible out of bounds read due to uninitialized data from ReturnFrameworkMessage. This could lead to local informa… |
CVE-2021-21190 | High | 8.8 | 2021-03-09 | Uninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory v… |
CVE-2021-28035 | Critical | 9.8 | 2021-03-05 | An issue was discovered in the stack_dst crate before 0.6.1 for Rust. Because of the push_inner behavior, a drop of uninitialized memory can occur upon a val.c… |
CVE-2021-28033 | Critical | 9.8 | 2021-03-05 | An issue was discovered in the byte_struct crate before 0.6.1 for Rust. There can be a drop of uninitialized memory if a certain deserialization method panics. |
CVE-2021-28030 | High | 7.5 | 2021-03-05 | An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Rea… |
CVE-2021-28029 | High | 7.5 | 2021-03-05 | An issue was discovered in the toodee crate before 0.3.0 for Rust. The row-insertion feature allows attackers to read the contents of uninitialized memory loca… |
CVE-2021-26953 | High | 7.5 | 2021-02-09 | An issue was discovered in the postscript crate before 0.14.0 for Rust. It might allow attackers to obtain sensitive information from uninitialized memory loca… |