Missing Initialization of a Variable
CWE-456
The product does not initialize critical variables.
We track 4 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.8. 1 has been exploited in real attacks.
How this weakness is prevented
- Implementation: Ensure that critical variables are initialized before first use.
- Requirements: Choose a language that is not susceptible to these issues.
Latest Missing Initialization of a Variable vulnerabilities
- 7.8 High severity
Linux Kernel Missing Initialization of a Variable Exploited
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the resulting @to skb can contain th
- 7.3 High severity
launcher: Incorrect Default Permissions
The Kolide Agent (aka: Launcher) is the lightweight agent designed to work with Kolide's service. An implementation bug in the Kolide Agent (known as `launcher`) allows for local privilege escalation to the SYSTEM user on Windows 10 and 11. The bug was introdu
- 8.8 High severity
llama.cpp: Missing Initialization of a Variable
Llama.cpp is LLM inference in C/C++. There is a use of uninitialized heap variable vulnerability in gguf_init_from_file, the code will free this uninitialized variable later. In a simple POC, it will directly cause a crash. If the file is carefully constructed
- 7.5 High severity
Cisco IOS XE Software: Missing Initialization of a Variable
A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) c