Skip to content

CWE-456 · Memory Corruption

Missing Initialization of a Variable

9CVEs

9 CVEs with CWE-456 as their weakness

CVEs with CWE-456, Most likely exploited
CVE · most likely exploitedCVSSEPSSPublished
CVE-2019-3836It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-ha…gnutls · gnutls · CVSS 5.9 · 2019-04-015.93.4%2019-04-01
CVE-2018-14641A security flaw was found in the ip_frag_reasm() function in net/ipv4/ip_fragment.c in the Linux kernel from 4.19-rc1 to 4.19-rc3 inclusive, which can cause a later system crash i…The Linux Foundation · kernel · CVSS 6.5 · 2018-09-186.52.9%2018-09-18
CVE-2021-34703Cisco IOS and IOS XE Software Link Layer Discovery Protocol Denial of Service VulnerabilityCisco · Cisco IOS · CVSS 6.8 · 2021-09-236.81.2%2021-09-23
CVE-2021-40403An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev (commit b5f1eacd), and Gerbv forked 2.8.0. A specially-c…Gerbv Project · Gerbv · CVSS 5.8 · 2022-02-045.81.1%2022-02-04
CVE-2023-20226A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an…Cisco · Cisco IOS XE Software · CVSS 8.6 · 2023-09-278.60.9%2023-09-27
CVE-2024-32878Use of Uninitialized Variable Vulnerability in llama.cppggerganov · llama.cpp · CVSS 7.1 · 2024-04-267.10.7%2024-04-26
CVE-2023-49062Katran could disclose non-initialized kernel memory as part of an IP header. The issue was present for IPv4 encapsulation and ICMP (v4) Too Big packet generation. After a bpf_xdp_…Facebook · Katran · 2023-11-28–0.6%2023-11-28
CVE-2025-10547CVE-2025-10547DrayTek Corporation · Vigor1000B · CVSS 9.8 · 2025-10-039.80.6%2025-10-03
CVE-2024-9780Missing Initialization of a Variable in WiresharkWireshark Foundation · Wireshark · CVSS 7.8 · 2024-10-107.80.2%2024-10-10

EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.

Updated AboutDevelopersSign in