CWE-824 Access of Uninitialized Pointer
baseThe product accesses or uses a pointer that has not been initialized.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (459)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-21971US | high9.3OT critical | KEV | ||
Windows Runtime Remote Code Execution Vulnerability | ||||
| CVE-2015-1770US | high8.8OT critical | KEV | ||
Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized Memory Use Vulnerabil… | ||||
| CVE-2026-109618US | critical9.8 | Exploit | ||
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave… | ||||
| CVE-2026-109619US | high8.1 | Exploit | ||
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The g… | ||||
| CVE-2010-1818US | high9.3 | Exploit | ||
The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the _Mars… | ||||
| CVE-2017-12561US | critical9.8 | Exploit | ||
A remote code execution vulnerability in HPE intelligent Management Center (iMC) PLAT version Plat 7.3 E0504P4 and earlier was found. | ||||
| CVE-2018-9948US | medium6.5 | Exploit | ||
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this v… | ||||
| CVE-2018-11803US | high7.5 | — | ||
Subversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash after dereferencing an uninitialized pointer if the client omits the root path in a rec… | ||||
| CVE-2019-0853US | high8.8 | — | ||
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerabilit… | ||||
| CVE-2007-2442US | high10.0 | — | ||
The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC crede… | ||||
| CVE-2009-0846US | high10.0 | — | ||
The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause… | ||||
| CVE-2022-0918US | high7.5 | Exploit | ||
A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of… | ||||
| CVE-2022-23636US | high8.1 | Exploit | ||
Wasmtime is an open source runtime for WebAssembly & WASI. Prior to versions 0.34.1 and 0.33.1, there exists a bug in the pooling instance allocator in Wasmtime's runtime where a f… | ||||
| CVE-2018-17141US | critical9.8 | — | ||
HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled, which is mishandled in F… | ||||
| CVE-2026-67281US | high7.5 | Exploit | ||
RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for fi… | ||||
| CVE-2021-36219US | critical9.8 | — | ||
An issue was discovered in SKALE sgxwallet 1.58.3. The provided input for ECALL 14 triggers a branch in trustedEcdsaSign that frees a non-initialized pointer from the stack. An att… | ||||
| CVE-2020-25573US | critical9.8 | — | ||
An issue was discovered in the linked-hash-map crate before 0.5.3 for Rust. It creates an uninitialized NonNull pointer, which violates a non-null constraint. | ||||
| CVE-2020-17446US | critical9.8 | — | ||
asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to a… | ||||
| CVE-2018-14356US | critical9.8 | — | ||
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID. | ||||
| CVE-2018-11743US | critical9.8 | — | ||
The init_copy function in kernel.c in mruby 1.4.1 makes initialize_copy calls for TT_ICLASS objects, which allows attackers to cause a denial of service (mrb_hash_keys uninitialize… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan