111 matches found
BIT-LIBPHP-2022-31625 Freeing unallocated memory in php_pgsql_free_params()
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This could lead to RCE vulnerability or...
PT-2025-35964
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the pNFS block/scsi layout implementation. The issue arises from a dereference of uninitialized pointers within the ext tree free commitdata function...
PT-2025-34436
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel related to the xfrm state management. Specifically, the state ptrs variable is not initialized early enough within the xfrm state find function. This...
CVE-2022-31759
AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affect system availability...
CVE-2020-11138
Uninitialized pointers accessed during music play back with incorrect bit stream due to an uninitialized heap memory result in instability in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,...
SUSE CVE-2025-37910
In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations On Adva boards, SMA sysfs store/get operations can call handlesignaloutputs or handlesignalinputs while the irig and dcf pointers are uninitialized, leading to a...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from uninitialized register pointers, which could lead to null pointer dereferences...
Adobe Animate Access to Uninitialized Pointers Vulnerability (CNVD-2025-10666)
Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate suffers from an access to uninitialized pointers vulnerability that can be exploited by an attacker to execute arbitrary code...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from uninitialized irig and dcf pointers in the ptpocp module, which could lead to null pointer dereferences...
Adobe Animate 缓冲区错误漏洞
Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate suffers from an access to uninitialized pointers vulnerability that can be exploited by an attacker to execute arbitrary code...
Luxion KeyShot 缓冲区错误漏洞
Luxion KeyShot is a software for designing photographs of 3D scenes from Luxion, USA. The software allows real-time 3D rendering workflows to display results immediately and reduce the time required to create photorealistic product photos. A buffer error vulnerability exists in Luxion KeyShot tha...
Luxion KeyShot 缓冲区错误漏洞
Luxion KeyShot is a software for designing photographs of 3D scenes from Luxion, USA. The software allows real-time 3D rendering workflows to display results immediately and reduce the time required to create photorealistic product photos. Luxion KeyShot suffers from a buffer error vulnerability...
libzvbi 安全漏洞
libzvbi is a VBI utility in the zapping-vbi open source. A security vulnerability exists in libzvbi version 0.2.43 and earlier, which stems from uninitialized pointers and could lead to remote attacks...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the tcpciirq function potentially accessing uninitialized tcpci pointers...
PHOENIX CONTACT CHARX SEC Buffer Error Vulnerability
The PHOENIX CONTACT CHARX SEC is a series of AC charge controllers from PHOENIX CONTACT, Germany. The PHOENIX CONTACT CHARX SEC suffers from a buffer error vulnerability that stems from the presence of a buffer error vulnerability. An attacker could use this vulnerability to trigger a denial of...
Adobe Bridge Security Vulnerability
Adobe Bridge is a file viewer from Adobe USA. A security vulnerability exists in Adobe Bridge prior to version 13.0.4 and prior to version 14.0.0, which stems from an Access to Uninitialized Pointers vulnerability that could lead to a sensitive memory disclosure...
Adobe Bridge Security Vulnerability
Adobe Bridge is a file viewer from Adobe USA. A security vulnerability exists in Adobe Bridge prior to version 13.0.4 and prior to version 14.0.0, which stems from an Access to Uninitialized Pointers vulnerability that could lead to a sensitive memory disclosure...
Adobe Acrobat Reader Security Vulnerability
Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDFs. A security vulnerability exists in Adobe Acrobat Reader prior to version 23.006.20360 and prior to version 20.005.30524, which stems from an Access to Uninitialized...
krb5: Denial of service through freeing uninitialized pointer
A vulnerability was found in the xdrkadm5principalentrec function in lib/kadm5/kadmrpcxdr.c in MIT Kerberos 5 krb5. This issue occurs due to lack of validation in the relationship between nkeydata and the keydata array count, leading to the freeing of uninitialized pointers. This may allow a remo...
Rockwell Automation Arena Simulation Software 缓冲区错误漏洞
Rockwell Automation Arena Simulation Software is a suite of simulation software from Rockwell Automation that provides 3D animation and graphics capabilities. A security vulnerability exists in Rockwell Automation Arena Simulation, which can be exploited by an attacker to submit unauthorized code...