CVE-2024-50173 drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup()

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix access to uninitialized variable in tickctxcleanup The group variable can't be used to retrieve ptdev in our second loop, because it points to the previously iterated listhead, not a valid group. Get the ptdev...

CVE-2024-50173 drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup()

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix access to uninitialized variable in tickctxcleanup The group variable can't be used to retrieve ptdev in our second loop, because it points to the previously iterated listhead, not a valid group. Get the ptdev...

CVE-2024-50173 drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup()

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix access to uninitialized variable in tickctxcleanup The group variable can't be used to retrieve ptdev in our second loop, because it points to the previously iterated listhead, not a valid group. Get the ptdev...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the presence of an uninitialized variable access problem...

The vulnerability of the acdb25.dll library in the AutoCAD simulation, design, and drafting software allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the acdb25.dll library in AutoCAD simulation, design, and drawing software relates to the use of an uninitialized variable. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, execute arbitrary code, or cause a service failu...

CVE-2024-8896

A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-8896 Autodesk AutoCAD DXF File Parsing Unitialized Variable Code Execution Vulnerability

A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-8896

CVE-2024-8896 affects Autodesk AutoCAD via a vulnerability in acdb25.dll when parsing malicious DXF files. Root cause: accessing an uninitialized variable in memory, enabling arbitrary code execution or crashes in the current process. Documented impacts include crashing and potential data leakage...

The vulnerability of the nci_rx_work() function in the Linux operating system allows a hacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the ncirxwork function in the net/nfc/nci/core.c file of the Linux operating system’s kernel is related to the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the protected...

The vulnerability of the gue_gro_receive() function in the IPv4 implementation of the Linux operating system’s kernel allows a attacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the guegroreceive function in the net/ipv4/foucore.c module, which is part of the Linux operating system’s IPv4 kernel implementation, relates to the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...

The vulnerability of the setup_one_line() function in the Linux operating system’s kernel in the User-mode-Linux (UML) mode allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setuponeline function in the arch/um/drivers/line.c module of the Linux kernel in the User-mode-Linux UML mode is related to the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the squashfs_read inode() function in the squashfs file system of Linux kernels allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the squashfsread inode function in the fs/squashfs/inode.c file of the squashfs file system in the Linux kernel is related to the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Delta Electronics CNCSoft-G2 DPAX File Parsing Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-G2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Delta Electronics CNCSoft-G2 Uninitialized Variable Vulnerability

Delta Electronics CNCSoft-G2 is a human-machine interface HMI software from Delta Electronics, China. The Delta Electronics CNCSoft-G2 suffers from an uninitialized variable vulnerability that can be exploited by an attacker to execute code in the context of the current process...

Trimble SketchUp Viewer SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2024-47966 Use of Uninitialized Variable vulnerability in Delta Electronics CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper initialization of memory prior to accessing it. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process...

Delta Electronics CNCSoft-G2

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.4 ATTENTION : low attack complexity Vendor : Delta Electronics Equipment : CNCSoft-G2 Vulnerabilities : Stack-based Buffer Overflow, Out-of-bounds Write, Heap-Based Buffer Overflow, Out-of-bounds Read, Use of Uninitialized Variable 2. RISK EVALUATION...

Delta Electronics CNCSoft-G2 安全漏洞

Delta Electronics CNCSoft-G2 is a human-machine interface HMI software from Delta Electronics, China. The Delta Electronics CNCSoft-G2 suffers from an uninitialized variable vulnerability that can be exploited by an attacker to execute code in the context of the current process...

GO-2024-3167 Golang FIPS OpenSSL has a Use of Uninitialized Variable vulnerability in github.com/golang-fips/openssl

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

Use Of Uninitialized Variable

github.com/golang-fips/openssl is vulnerable to Use of Uninitialized Variable. The vulnerability is due to improper handling of uninitialized buffer lengths in FIPS mode, which can result in zeroed buffers being returned. This flaw allows an attacker to force false positive hash matches, send...