17602 matches found
PT-2026-39992
Name of the Vulnerable Software and Affected Versions Solid Edge SE2026 versions prior to V226.0 Update 5 Description An issue exists where the application is susceptible to uninitialized pointer access during the parsing of specially crafted PAR files. This could allow an attacker to execute...
PT-2026-41307
Name of the Vulnerable Software and Affected Versions ws versions prior to 8.20.1 Description ws is an open source WebSocket client and server for Node.js. The websocket.close function is susceptible to uninitialized memory disclosure, which occurs when a TypedArray is provided as the reason...
The vulnerability of the `tc_chain_fill_node()` function in Linux operating systems allows a hacker to gain unauthorized access to confidential information.
The vulnerability of the tcchainfillnode function in Linux operating systems is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential information...
The vulnerability of the ctnetlink_alloc_expect() function in Linux operating systems allows a hacker to disclose confidential information.
The vulnerability of the ctnetlinkallocexpect function in Linux operating systems is related to access to an uninitialized pointer. Exploiting this vulnerability can allow an attacker to disclose confidential information...
Use of Uninitialized Resource
Overview ws is a simple to use websocket client, server and console for node.js. Affected versions of this package are vulnerable to Use of Uninitialized Resource in the websocket.close implementation in the Sender class, which exposes uninitialized memory when a TypedArray is provided as the...
Use of Uninitialized Resource
Overview org.webjars.npm:ws is a simple to use websocket client, server and console for node.js. Affected versions of this package are vulnerable to Use of Uninitialized Resource in the websocket.close implementation in the Sender class, which exposes uninitialized memory when a TypedArray is...
SUSE CVE-2026-43427
In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: fix reordering issue in read code path Quoting the bug report: Due to compiler optimization or CPU out-of-order execution, the desc-length update can be reordered before the memmove. If this happens, wdmread...
Chromium: CVE-2026-8020 Uninitialized Use in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CLSA-2026-1778493745 opensc: Fix of 5 CVEs
CVE-2024-45615: initialize uninitialized variables passed as arguments - CVE-2024-45616: fix insufficient control of APDU response buffer length - CVE-2024-45617: check return values to avoid uninitialized variable use - CVE-2024-45618: check return values in pkcs15-init to avoid uninitialized...
firefox: thunderbird: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component...
firefox: thunderbird: Uninitialized memory in the Audio/Video: Web Codecs component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Uninitialized memory in the Audio/Video: Web Codecs component...
openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables
A flaw was found in the OpenSSH GSSAPI Generic Security Service Application Program Interface delta patches, as included in various Linux distributions. A remote attacker could exploit this by sending an unexpected GSSAPI message type during the key exchange process. This occurs because the...
OSV-2026-711 Use-of-uninitialized-value in jxl::PerformMulBlending
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=511400706 Crash type: Use-of-uninitialized-value Crash state: jxl::PerformMulBlending jxl::PerformBlending jxl::NAVX2::BlendingStage::ProcessRow...
Unity Linux 20.1060e / 20.1070e Security Update: curl (UTSA-2026-017588)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017588 advisory. curl supports the -t command line option, known as CURLOPTTELNETOPTIONSin libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Du...
Unity Linux 20.1060e / 20.1070e Security Update: curl (UTSA-2026-017661)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017661 advisory. curl 7.7 through 7.76.1 suffers from an information disclosure when the -t command line option, known as CURLOPTTELNETOPTIONS in libcurl, is used to send...
Unity Linux 20.1060e / 20.1070e Security Update: exiv2 (UTSA-2026-017659)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017659 advisory. Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A read of uninitialized memory was found ...
MGASA-2026-0125 Updated thunderbird packages fix security vulnerabilities
Use-after-free in the DOM: Core & HTML component. CVE-2026-6746 Use-after-free in the WebRTC component. CVE-2026-6747 Uninitialized memory in the Audio/Video: Web Codecs component. CVE-2026-6748 Information disclosure due to uninitialized memory in the Graphics: Canvas2D component. CVE-2026-6749...
SUSE CVE-2026-43272
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix possible dereference of uninitialized pointer There is a pointer headpage in rbmetavalidateevents which is not initialized at the beginning of a function. This pointer can be dereferenced if there is a failure...
CVE-2026-43474
A flaw was found in the Linux kernel's fuse filesystem. A local user could exploit an uninitialized value vulnerability when calling vfsfileattrget. This could potentially lead to information disclosure or system instability...