Access of Uninitialized Pointer
CWE-824
The product accesses or uses a pointer that has not been initialized.
If an attacker can influence the portion of uninitialized memory that is contained in the pointer, this weakness could be leveraged to execute code or perform other attacks. Depending on memory layout, associated memory management behaviors, and product operation, the attacker might be able to influence the contents of the uninitialized pointer, thus gaining more fine-grained control of the memory location to be accessed.
We track 128 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.9. 4 have been exploited in real attacks.
Latest Access of Uninitialized Pointer vulnerabilities
- 8.1 High severity
PHP: Release of Invalid Pointer or Reference
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This c
- 7.8 High severity
V-SFT: Access of Uninitialized Pointer
Access of uninitialized pointer vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a speciall
- 7.8 High severity
JT2Go: Access of Uninitialized Pointer
A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V14.0.0.1). The CGM_NIST_Loader.dll library is vulnerable to uninitialized pointe
- 7.8 High severity
Acrobat Reader: Access of Uninitialized Pointer
Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by the use of a variable that has not been initialized when processing of embedded fonts, potentially resulting in arbitrary code execu
- 7.5 High severity
Junos OS: Access of Uninitialized Pointer
An Access of Uninitialized Pointer vulnerability in the SIP ALG of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Servi
- 8.1 High severity
wasmtime: Access of Uninitialized Pointer
Wasmtime is an open source runtime for WebAssembly & WASI. Prior to versions 0.34.1 and 0.33.1, there exists a bug in the pooling instance allocator in Wasmtime's runtime where a failure to instantiate an instance for a module that defines an `externref` globa
- 9.3 High severity
Microsoft Windows Runtime Remote Code Execution Exploited
Windows Runtime Remote Code Execution Vulnerability
- 8.8 High severity
Microsoft Office Uninitialized Memory Use Exploited
Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized Memory Use Vulnerability."