CWE-908

In the Linux kernel, the following vulnerability has been resolved: arm64: kexec: initialize kexec_buf struct in load_o

In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Allow UD qp_type to join multicast only

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix deinitialization of firmware reso

In the Linux kernel, the following vulnerability has been resolved: cpufreq: Init completion before kobject_init_and_ad

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clean up si_domain in the init_dmars()

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: initialize damo_filter->list from da

Use of uninitialized resource in Windows Management Services allows an authorized attacker to disclose information local

Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uniniti

The http parser in Phusion Passenger 6.0.21 through 6.0.25 before 6.0.26 allows a denial of service during parsing of a

A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbi_s

ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds acc

In DA, there is a possible read of uninitialized heap data due to uninitialized data. This could lead to local informati

A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into altern

Vulnerability of variables not being initialized in the notification module Impact: Successful exploitation of this vuln

Windows Smart Card Reader Information Disclosure Vulnerability

In high traffic environments, a Silicon Labs OpenThread RCP (see impacted versions) fails to clear the SPI transmit buff

HDF5 Library through 1.14.3 may use an uninitialized value in H5A__attr_release_table in H5Aint.c.

In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be ini

In the Linux kernel, the following vulnerability has been resolved: slip: make slhc_remember() more robust against mali

In the Linux kernel, the following vulnerability has been resolved: nfs: Fix KMSAN warning in decode_getfattr_attrs()

GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerabili

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in nci_dev_up and nci_nt

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in nci_rx_work syzbot r

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ

Uninitialized Use in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to potentially pe

The ctl_write_buffer and ctl_read_buffer functions allocated memory to be returned to userspace, without initializing it

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: make sure to pull inner header in __ip6

In the Linux kernel, the following vulnerability has been resolved: net: zero-initialize tc skb extension on allocation

Memory corruption while processing IOCTL call to set metainfo.

Information disclosure due to uninitialized variable.

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: replace skb_put with skb_put_zero Avoi

In Xpdf 4.05 (and earlier), invalid header info in a DCT (JPEG) stream can lead to an uninitialized variable in the DCT

In the Linux kernel, the following vulnerability has been resolved: sctp: properly validate chunk size in sctp_sf_ootb(

ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity

A maliciously crafted STP or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can be used to uni

Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Typ

Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Typ

Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the file reading procedur

In the Linux kernel, the following vulnerability has been resolved: fork: defer linking file vma until vma is fully ini

PDF-XChange Editor U3D File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allow

In the Linux kernel, the following vulnerability has been resolved: cpumap: Zero-initialise xdp_rxq_info struct before

In the Linux kernel, the following vulnerability has been resolved: drm/msm/a4xx: fix error handling in a4xx_gpu_init()

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_IDLETIMER: fix panic that occurs when

In the Linux kernel, the following vulnerability has been resolved: sched/scs: Reset task stack state in bringup_cpu()

In the Linux kernel, the following vulnerability has been resolved: i40e: fix vf may be used uninitialized in this func

In the Linux kernel, the following vulnerability has been resolved: nsh: Restore skb->{protocol,data,mac_header} for ou

In AcvpOnMessage of avcp.cpp, there is a possible EOP due to uninitialized data. This could lead to local escalation of

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Init `ddp_comp` with devm_kcalloc()