CWE-457

High likelihood

Use of Uninitialized Variable

Parent: CWE-908 - Use of Uninitialized Resource

The code uses a variable that has not been initialized, leading to unpredictable or unintended results.

227 vulnerabilities with CWE-457
CVE-2025-20638 MEDIUM
Android - Local Information Disclosure via Uninitialized Heap Data Read
CVSS 4.3
CVE-2024-56446 MEDIUM
Notification Module - Info Disclosure
CVSS 4.0
CVE-2024-47540 CRITICAL
GStreamer < 1.24.10 - Use-After-Free in Matroska Demuxer
CVSS 9.8
CVE-2024-9717 HIGH
Trimble SketchUp Viewer - Remote Code Execution via SKP File Parsing
CVSS 7.8
CVE-2024-8842 HIGH
PDF-XChange Editor 10.3.0.386-10.4.0.388 - Remote Code Execution via RTF File Parsing
CVSS 7.8
CVE-2024-10204 HIGH
eDrawings SOLIDWORKS 2024-2025 - Heap-based Buffer Overflow and Uninitialized Variable in X_B and SAT File Parsing
CVSS 7.8
CVE-2024-10934 CRITICAL
OpenBSD < 7.4 - Double Free in NFS Client and Server Implementation
CVSS 9.8
CVE-2024-47966 HIGH
Delta Electronics CNCSoft-G2 - Use-After-Free via Uninitialized Memory Access
CVSS 7.8
CVE-2024-9355 MEDIUM
Golang FIPS OpenSSL - Buffer Overflow
CVSS 6.5
CVE-2024-7022 MEDIUM
Google Chrome < 123.0.6312.58 - Use-After-Free in V8 via Crafted HTML Page
CVSS 4.3
CVE-2024-45618 LOW
Redhat Enterprise Linux < 0.26.0 - Use of Uninitialized Resource
CVSS 3.9
CVE-2024-45617 LOW
Redhat Enterprise Linux < 0.26.0 - Use of Uninitialized Resource
CVSS 3.9
CVE-2024-45616 LOW
Redhat Enterprise Linux < 0.26.0 - Use of Uninitialized Resource
CVSS 3.9
CVE-2024-45615 LOW
Redhat Enterprise Linux < 0.26.0 - Use of Uninitialized Resource
CVSS 3.9
CVE-2024-7868 HIGH
Xpdf < 4.06 - Use-After-Free in DCT Decoder
CVSS 8.2
CVE-2024-7542 LOW
oFono - Information Disclosure via AT CMGR Command Uninitialized Variable
CVSS 3.3
CVE-2024-7541 LOW
oFono - Information Disclosure via AT CMT Command Uninitialized Variable
CVSS 3.3
CVE-2024-7540 LOW
oFono - Information Disclosure via Uninitialized Variable in AT CMGL Command Response Parsing
CVSS 3.3
CVE-2024-33021 HIGH
Qualcomm AR8035 Firmware - Memory Corruption via IOCTL Metainfo Handling
CVSS 8.4
CVE-2024-6990 HIGH
Google Chrome < 127.0.6533.88 - Uninitialized Use in Dawn via Crafted HTML Page
CVSS 8.8
CVE-2024-23159 HIGH
Autodesk AutoCAD 2022-<2022.1.5 - Use-After-Free via STP File Parsing
CVSS 7.8
CVE-2024-37002 HIGH
Autodesk AutoCAD 2022-2022.1.5 - Use of Uninitialized Variable via Crafted MODEL File
CVSS 7.8
CVE-2024-32611 CRITICAL
HDF5 < 1.14.4 - Use of Uninitialized Variable in H5A__attr_release_table
CVSS 9.8
CVE-2024-31636 LOW
LIEF 0.14.1 - Information Disclosure via Uninitialized Variable in machd_reader.c
CVSS 3.9
CVE-2024-32625 MEDIUM
ASRMicro ASR1806 Firmware < cp01.057.067 - Use of Uninitialized Variable in OffloadAMRWriter
CVSS 5.8
Details
Vulnerabilities 227
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits