CWE-824 · Memory Corruption
Access of Uninitialized Pointer
285CVEs
SortMost likely exploited
285 CVEs with CWE-824 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-21971In CISA KEVExploitedWindows Runtime Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2022-02-09 | 7.8 | 54% | 2022-02-09 |
| CVE-2015-1770In CISA KEVExploitedMicrosoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized Memory Use Vulnerabi…Microsoft · Office · CVSS 8.8 · 2015-06-10 | 8.8 | 35% | 2015-06-10 |
| CVE-2020-9274CheckPure-FTPd ≤ 1.0.49 - DoS via Uninitialized PointerPureftpd · Pure-Ftpd · 2020-02-26 | – | 6.0% | 2020-02-26 |
| CVE-2018-9948This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this…Foxit · Foxit Reader · 2018-05-17 | – | 62% | 2018-05-17 |
| CVE-2018-11803Subversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash after dereferencing an uninitialized pointer if the client omits the root path in a re…Apache Software Foundation · Apache Subversion · 2019-02-05 | – | 58% | 2019-02-05 |
| CVE-2010-1818The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the _Mar…Apple · Quicktime · 2010-08-31 | – | 43% | 2010-08-31 |
| CVE-2017-12561A remote code execution vulnerability in HPE intelligent Management Center (iMC) PLAT version Plat 7.3 E0504P4 and earlier was found.Hewlett Packard Enterprise · intelligent Management Center (iMC) PLAT · 2018-02-15 | – | 31% | 2018-02-15 |
| CVE-2019-0853A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerabili…Microsoft · Windows · 2019-04-09 | – | 30% | 2019-04-09 |
| CVE-2022-27794Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution VulnerabilityAdobe · Acrobat Reader · CVSS 7.8 · 2022-05-11 | 7.8 | 14% | 2022-05-11 |
| CVE-2007-2442The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC cred…Mit · Kerberos 5 · 2007-06-26 | – | 11% | 2007-06-26 |
| CVE-2020-8882This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulner…Foxit · Studio Photo · CVSS 7.8 · 2020-03-20 | 7.8 | 11% | 2020-03-20 |
| CVE-2009-0846The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to caus…Mit · Kerberos 5 · 2009-04-09 | – | 8.9% | 2009-04-09 |
| CVE-2006-6143The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an unin…Mit · Kerberos 5 · 2007-01-10 | – | 8.2% | 2007-01-10 |
| CVE-2022-43606A use-of-uninitialized-pointer vulnerability exists in the Forward Open connection_management_entry functionality of EIP Stack Group OpENer development commit 58ee13c. A specially…EIP Stack Group · OpENer · CVSS 7.5 · 2023-03-16 | 7.5 | 8.0% | 2023-03-16 |
| CVE-2009-1415lib/pk-libgcrypt.c in libgnutls in GnuTLS before 2.6.6 does not properly handle invalid DSA signatures, which allows remote attackers to cause a denial of service (application cra…Gnu · Gnutls · 2009-04-30 | – | 7.9% | 2009-04-30 |
| CVE-2017-16378An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and…Adobe · Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and ea… · 2017-12-09 | – | 6.8% | 2017-12-09 |
| CVE-2017-16377An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and…Adobe · Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and ea… · 2017-12-09 | – | 6.8% | 2017-12-09 |
| CVE-2025-2284Santesoft Sante PACS Server Access of Uninitialized Pointer DoSSantesoft · Sante PACS Server · CVSS 7.5 · 2025-03-13 | 7.5 | 6.3% | 2025-03-13 |
| CVE-2007-4000The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properl…Mit · Kerberos 5 · 2007-09-05 | – | 6.1% | 2007-09-05 |
| CVE-2014-1564Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do not properly initialize memory for GIF rendering, which allows remote attackers to o…Mozilla · Firefox · 2014-09-03 | – | 5.5% | 2014-09-03 |
| CVE-2019-13527In Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier, a maliciously crafted Arena file opened by an unsuspecting user may result in the use…Rockwellautomation · Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 a… · 2019-09-24 | – | 5.3% | 2019-09-24 |
| CVE-2016-1005Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK befor…Adobe · Flash Player · 2016-03-12 | – | 5.3% | 2016-03-12 |
| CVE-2007-4639EnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function calls that occur before a call to pldbg_create_listener, which allows remote authenticated use…Enterprisedb · Postgres Advanced Server · 2007-08-31 | – | 5.1% | 2007-08-31 |
| CVE-2009-0040The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of…Libpng · Libpng · 2009-02-22 | – | 4.8% | 2009-02-22 |
| CVE-2009-1721The decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1 allows context-dependent attackers to cause a denial of service (application crash)…Openexr · Openexr · 2009-07-31 | – | 4.3% | 2009-07-31 |
| CVE-2016-4343The phar_make_dirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0.3 mishandles zero-size ././@LongLink files, which allows remote attackers to cause…Php · Php · 2016-05-22 | – | 4.2% | 2016-05-22 |
| CVE-2007-1213The TrueType Fonts rasterizer in Microsoft Windows 2000 SP4 allows local users to gain privileges via crafted TrueType fonts, which result in an uninitialized function pointer.Microsoft · Windows 2000 · 2007-04-04 | – | 3.9% | 2007-04-04 |
| CVE-2018-19857The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF files, because a ReadK…Videolan · Vlc Media Player · 2018-12-05 | – | 3.9% | 2018-12-05 |
| CVE-2019-12870An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead t…Phoenixcontact · Automationworx Software Suite · 2019-06-24 | – | 3.7% | 2019-06-24 |
| CVE-2006-4175The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote attackers to cause a denial of service (cr…Sun · Java System Directory Server · 2007-03-26 | – | 3.5% | 2007-03-26 |
| CVE-2018-1000099Teluu PJSIP version 2.7.1 and earlier contains a Access of Null/Uninitialized Pointer vulnerability in pjmedia SDP parsing that can result in Crash. This attack appear to be explo…Teluu · Pjsip · 2018-03-13 | – | 3.4% | 2018-03-13 |
| CVE-2022-34228Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution VulnerabilityAdobe · Acrobat Reader · CVSS 7.8 · 2022-07-15 | 7.8 | 3.4% | 2022-07-15 |
| CVE-2006-0054The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service (firewall crash) via ICMP IP fragments that match a reset, reject or unreach action,…Freebsd · Freebsd · CVSS 5.3 · 2006-01-11 | 5.3 | 3.2% | 2006-01-11 |
| CVE-2007-4682CoreText in Apple Mac OS X 10.4 through 10.4.10 allows attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted text content that…Apple · Mac Os X · 2007-11-15 | – | 3.2% | 2007-11-15 |
| CVE-2018-14356An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID.Mutt · Mutt · 2018-07-17 | – | 3.2% | 2018-07-17 |
| CVE-2018-3842An exploitable use of an uninitialized pointer vulnerability exists in the JavaScript engine in Foxit PDF Reader version 9.0.1.1049. A specially crafted PDF document can lead to a…Talos · Foxit · CVSS 8.8 · 2018-04-19 | 8.8 | 3.2% | 2018-04-19 |
| CVE-2023-38226ZDI-CAN-21240: Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution VulnerabilityAdobe · Acrobat Reader · CVSS 7.8 · 2023-08-10 | 7.8 | 3.1% | 2023-08-10 |
| CVE-2023-38223ZDI-CAN-21063: Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution VulnerabilityAdobe · Acrobat Reader · CVSS 7.8 · 2023-08-10 | 7.8 | 3.1% | 2023-08-10 |
| CVE-2020-17469An issue was discovered in FNET through 4.6.4. The code for IPv6 fragment reassembly tries to access a previous fragment starting from a network incoming fragment that still doesn…Butok · Fnet · 2020-12-11 | – | 3.0% | 2020-12-11 |
| CVE-2023-36054lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind cras…Mit · Kerberos 5 · 2023-08-07 | – | 2.8% | 2023-08-07 |
| CVE-2020-6093An exploitable information disclosure vulnerability exists in the way Nitro Pro 13.9.1.155 does XML error handling. A specially crafted PDF document can cause uninitialized memory…Gonitro · Nitro Pro · CVSS 6.5 · 2020-05-18 | 6.5 | 2.7% | 2020-05-18 |
| CVE-2023-38234ZDI-CAN-21359: Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution VulnerabilityAdobe · Acrobat Reader · CVSS 7.8 · 2023-08-10 | 7.8 | 2.6% | 2023-08-10 |
| CVE-2019-1869Cisco StarOS Denial of Service VulnerabilityCisco · Cisco ASR 5000 Series Software · CVSS 8.6 · 2019-06-20 | 8.6 | 2.6% | 2019-06-20 |
| CVE-2003-1201ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slap_passwd_parse function does not return LDAP_SUCCESS, attempts to free an u…Openldap · Openldap · 2005-05-10 | – | 2.6% | 2005-05-10 |
| CVE-2018-9981This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerab…Foxit · Foxit Reader · 2018-05-17 | – | 2.6% | 2018-05-17 |
| CVE-2019-11498WavpackSetConfiguration64 in pack_utils.c in libwavpack.a in WavPack through 5.1.0 has a "Conditional jump or move depends on uninitialised value" condition, which might allow att…Wavpack · Wavpack · 2019-04-24 | – | 2.5% | 2019-04-24 |
| CVE-2021-35991Adobe Bridge MP4 File Parsing Uninitialized Variable Information Disclosure VulnerabilityAdobe · Bridge · CVSS 3.3 · 2021-08-20 | 3.3 | 2.5% | 2021-08-20 |
| CVE-2020-17446asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to…Magic · Asyncpg · 2020-08-12 | – | 2.4% | 2020-08-12 |
| CVE-2018-11743The init_copy function in kernel.c in mruby 1.4.1 makes initialize_copy calls for TT_ICLASS objects, which allows attackers to cause a denial of service (mrb_hash_keys uninitializ…Mruby · Mruby · 2018-06-05 | – | 2.2% | 2018-06-05 |
| CVE-2018-16522Amazon Web Services (AWS) FreeRTOS through 1.3.1 has an uninitialized pointer free in SOCKETS_SetSockOpt.Amazon · Amazon Web Services Freertos · 2018-12-06 | – | 2.0% | 2018-12-06 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.