CVE-2025-13674: Access of Uninitialized Pointer

BPv7 dissector crash in Wireshark 4.6.0 allows denial of service...

CVE-2025-13499 Access of Uninitialized Pointer in Wireshark

Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service...

CVE-2025-13499 Access of Uninitialized Pointer in Wireshark

Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service...

CVE-2025-13499

CVE-2025-13499 affects Wireshark and is described in multiple advisories as a Kafka dissector crash leading to denial of service. The root cause is an access of an uninitialized pointer in the Kafka dissector. Public references across Debian, Fedora, and other feeds indicate this vulnerability is...

CVE-2025-13499 Access of Uninitialized Pointer in Wireshark

Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service...

CVE-2025-13499: Access of Uninitialized Pointer

Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service...

Siemens SCALANCE and RUGGEDCOM Devices Access of Uninitialized Pointer (CVE-2024-57874)

arm64: ptrace: vulnerability due to an uninitialized variable in the taggedaddrctrlset function, leading to potential memory leakage from the kernel stack when a zero-length SETREGSET call is made, exposing up to 64 bits of memory. This plugin only works with Tenable.ot. Please visit...

Vulnerability of the process_update_result() function in the drivers/md/dm-vdo/dedupe.c module – A driver for supporting multiple device types (RAID and LVM) in the Linux kernel, which allows a hacker to cause service failure.

Vulnerability of the processupdateresult function in the drivers/md/dm-vdo/dedupe.c module – The driver for supporting multiple devices RAID and LVM in the Linux kernel is vulnerable due to the lack of protection against accessing an uninitialized pointer. Exploiting this vulnerability could allo...

Vulnerability of the dummy_urb_enqueue() function in the drivers/usb/gadget/udc/dummy_hcd.c module – A driver for supporting USB gadgets in the Linux operating system, which allows a hacker to cause a service failure.

Vulnerability of the dummyurbenqueue function in the drivers/usb/gadget/udc/dummyhcd.c module – The Linux device driver framework relies on access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause service failure...

CVE-2025-40155

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: debugfs: Fix legacy mode page table dump logic In legacy mode, SSPTPTR is ignored if TT is not 00b or 01b. SSPTPTR maybe uninitialized or zero in that case and may cause oops like: Oops: general protection fault,...

CVE-2025-40155 iommu/vt-d: debugfs: Fix legacy mode page table dump logic

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: debugfs: Fix legacy mode page table dump logic In legacy mode, SSPTPTR is ignored if TT is not 00b or 01b. SSPTPTR maybe uninitialized or zero in that case and may cause oops like: Oops: general protection fault,...

CVE-2025-40127 hwrng: ks-sa - fix division by zero in ks_sa_rng_init

In the Linux kernel, the following vulnerability has been resolved: hwrng: ks-sa - fix division by zero in kssarnginit Fix division by zero in kssarnginit caused by missing clock pointer initialization. The clkgetrate call is performed on an uninitialized clk pointer, resulting in division by zer...

kernel: usbnet: fix memory leak in error case

In the Linux kernel, the following vulnerability has been resolved: usbnet: fix memory leak in error case usbnetwritecmdasync mixed up which buffers need to be freed in which error case. v2: add Fixes tag v3: fix uninitialized buf pointer...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: pNFS: Fixed an issue where uninitialized pointers were dereferenced. The error occurs during the third attempt to encode extents. When the function exttreepreparecommit reallocates a larger buffer to retry encoding extents, th...

CVE-2025-23352

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data...

Juniper Junos OS Vulnerability (JSA103151)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA103151 advisory. - An Access of Uninitialized Pointer vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved with BGP sharding configured allows ...

The vulnerability of the Luxion KeyShot 3D modeling rendering software lies in its access to an uninitialized pointer, allowing a hacker to execute arbitrary code.

The vulnerability of the Luxion KeyShot 3D modeling rendering software lies in the access to an uninitialized pointer during the processing of DAE format files. Exploiting this vulnerability allows a hacker to execute arbitrary code...

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools relates to access to an uninitialized pointer, allowing attackers to gain unauthorized access to protected information.

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools is related to improper cleaning of dynamic memory. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

EUVD-2025-35725

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data...

CVE-2025-23352

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data...