Weaknesses of type CWE-908

345 results

Uso de recurso não inicializado

O código usa uma variável, buffer, ponteiro ou outro recurso sem antes atribuir um valor válido ou preparar adequadamente. Isso leva a comportamento imprevisível: o programa pode ler lixo de memória, crashes, ou em casos críticos, permitir exploração de segurança.

Example

Um desenvolvedor declara um array local de 100 bytes sem inicializar, passa ele para uma função que assume valores válidos, e a função processa lixo de memória como se fossem dados legítimos. Ou um ponteiro não inicializado é desreferenciado, causando acesso a endereço inválido.

How to mitigate

Sempre inicialize variáveis e estruturas no momento da declaração (com valores zero, nulos ou adequados ao contexto). Use ferramentas estáticas (linters, sanitizers) que detectam uso de não-inicializados, e configure o compilador para avisar sobre isso (ex: -Wuninitialized em GCC/Clang).

CVE-2025-21891MEDIUMipvlan: ensure network headers are in skb linear partEPSS 0.2%CVE-2023-22330MEDIUMUse of uninitialized resource in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure viEPSS 0.2%CVE-2021-29581LOWSegfault in `CTCBeamSearchDecoder`EPSS 0.2%CVE-2021-29580LOWUndefined behavior and `CHECK`-fail in `FractionalMaxPoolGrad`EPSS 0.2%CVE-2026-87647LOWUninitialized resource in GPU in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to EPSS 0.2%CVE-2024-57878MEDIUMarm64: ptrace: fix partial SETREGSET for NT_ARM_FPMREPSS 0.2%CVE-2021-37682MEDIUMUse of unitialized value in TensorFlow LiteEPSS 0.2%CVE-2024-57877MEDIUMarm64: ptrace: fix partial SETREGSET for NT_ARM_POEEPSS 0.2%CVE-2026-48104MEDIUMGHSL-2026-120: 7-Zip SquashFS BlockToNode uninitialized heap readEPSS 0.2%CVE-2023-53351MEDIUMdrm/sched: Check scheduler work queue before calling timeout handlingEPSS 0.2%CVE-2025-12736MEDIUMmultimedia_audio_standard has an insecure storage of sensitive information vulnerabilityEPSS 0.2%CVE-2023-36836MEDIUMJunos OS and Junos OS Evolved: In a MoFRR scenario an rpd core may be observed when a low privileged CLI command is executedEPSS 0.2%CVE-2022-50346MEDIUMext4: init quota for 'old.inode' in 'ext4_rename'EPSS 0.2%CVE-2025-39833MEDIUMmISDN: hfcpci: Fix warning when deleting uninitialized timerEPSS 0.1%CVE-2026-93018MEDIUMImager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_pEPSS 0.1%CVE-2026-84622MEDIUMA memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOEPSS 0.1%CVE-2022-32615MEDIUMIn ccd, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execEPSS 0.1%CVE-2022-32616MEDIUMIn isp, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execEPSS 0.1%CVE-2026-56085LOWDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1EPSS 0.1%CVE-2026-70631MEDIUMFFmpeg 0.5 < 9.0 Uninitialized Heap Memory Read in TIFF DecoderEPSS 0.1%