CWE-457

High likelihood

Use of Uninitialized Variable

Parent: CWE-908 - Use of Uninitialized Resource

The code uses a variable that has not been initialized, leading to unpredictable or unintended results.

172 vulnerabilities with CWE-457
CVE-2022-2308 MEDIUM
Linux Kernel - Use of Uninitialized Variable in vDPA VDUSE Config Space Handling
CVSS 6.5
CVE-2022-33716 LOW
ICCC TA <SMR Aug-2022 Release 1 - Info Disclosure
CVSS 2.3
CVE-2022-34655 HIGH
BIG-IP 14.1.0-14.1.4 - Denial of Service via iRule HTTP::payload Command
CVSS 7.5
CVE-2022-21217 CRITICAL
Reolink RLC-410W Firmware 3.0.0.136_20121102 - Out-of-Bounds Write via TestEmail Functionality
CVSS 9.8
CVE-2021-34953 HIGH
Foxit PDF Reader and Editor - Remote Code Execution via Uninitialized Annotation Pointer
CVSS 7.8
CVE-2021-34951 LOW
Foxit PDF Editor and Reader - Information Disclosure via Uninitialized Annotation Pointer
CVSS 3.3
CVE-2021-46631 HIGH
Bentley Microstation and View < 10.16.02 - Remote Code Execution via TIF Image Parsing
CVSS 7.8
CVE-2021-46617 HIGH
Bentley MicroStation CONNECT 10.16.0.80 - RCE
CVSS 7.8
CVE-2021-46570 HIGH
Bentley View 10.16.0.80 - Info Disclosure
CVSS 7.8
CVE-2021-46566 HIGH
Bentley MicroStation CONNECT 10.16.0.80 - RCE
CVSS 7.8
CVE-2021-21966 MEDIUM
TI SimpleLink CC32XX SDK < 5.30.00.08 - Information Disclosure via HTTP Server /ping.html
CVSS 5.3
CVE-2021-40418 CRITICAL
DaVinci Resolve - Use-After-Free via R3D SDK DPDecoder Service
CVSS 9.8
CVE-2021-44003 MEDIUM
Siemens JT2Go and Teamcenter Visualization < 13.2.0.5 - Denial of Service via TIFF File Parsing
CVSS 5.5
CVE-2021-41253 MEDIUM
Zydis < 3.2.0 - Heap Buffer Overflow via Uninitialized String Object in Formatter Buffer
CVSS 5.9
CVE-2021-3928 HIGH
vim < 8.2.3582 - Use of Uninitialized Variable
CVSS 7.8
CVE-2021-31435 HIGH
Foxit Studio Photo < 3.6.6.933 - Remote Code Execution via CMP File Parsing
CVSS 7.8
CVE-2020-27124 HIGH
Cisco Adaptive Security Appliance Software - Denial of Service via Malicious SSL/TLS Message
CVSS 8.6
CVE-2019-1010319 MEDIUM
WavPack <5.1.0 - Use of Uninitialized Variable
CVSS 5.5
CVE-2019-1010317 MEDIUM
WavPack <5.1.0 - Use of Uninitialized Variable
CVSS 5.5
CVE-2019-11038 MEDIUM
libgd - Information Disclosure via Uninitialized Variable in gdImageCreateFromXbm
CVSS 5.3
CVE-2011-0539 HIGH
OpenSSH 5.6-5.7 - Information Disclosure via Uninitialized Nonce in Legacy Certificate Generation
CVSS 7.5
CVE-2009-0901 HIGH
Microsoft Visual C++ and Visual Studio - Remote Code Execution via Uninitialized VARIANT in ATL
CVSS 8.8
Details
Vulnerabilities 172
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits