Skip to content
OpenAdvisories

Weakness (CWE)

CWE-824: Access of Uninitialized Pointer

Base Incomplete

The product accesses or uses a pointer that has not been initialized.

More detail

If an attacker can influence the portion of uninitialized memory that is contained in the pointer, this weakness could be leveraged to execute code or perform other attacks.

Depending on memory layout, associated memory management behaviors, and product operation, the attacker might be able to influence the contents of the uninitialized pointer, thus gaining more fine-grained control of the memory location to be accessed.

Source: MITRE CWE-824

All Critical High Medium Low Exploited only Public exploit

128 results · Clear filters · Feed

  • High 7.1
    CVE-2021-37658

    Reference binding to nullptr in `MatrixSetDiagV*` ops in TensorFlow

    TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in all operations of type `tf.raw_ops.MatrixSetDiagV*`. The [implementation](https://g…

    TensorFlow TensorFlow tensorflow tensorflow-cpu PyPI
  • High 7.8
    CVE-2021-31503

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskt…

    OpenText Brava! Desktop
  • High 7.8
    CVE-2021-33542

    Phoenix Contact: Automation Worx Software Suite affected by Remote Code Execution (RCE) vulnerability

    Phoenix Contact Classic Automation Worx Software Suite in Version 1.87 and below is affected by a remote code execution vulnerability. Manipulated PC Worx or Config+ projects could lead to a remote code execution when unallocated memory is freed because of in…

    Phoenix Contact Automation Worx Software Suite ICS / OT
  • High 7.8
    CVE-2021-31479

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskt…

    OpenText Brava! Desktop
  • High 7.8
    CVE-2021-29098

    ArcGIS general raster security update: uninitialized pointer

    Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allow an unauthenticated attacker to achieve arbitrary code execution i…

    Esri ArcReader ArcGIS Pro ArcGIS Desktop
  • High 7.8
    CVE-2020-8882 EPSS 11%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.…

    Foxit Studio Photo
  • High 8.6
    CVE-2019-1869

    Cisco StarOS Denial of Service Vulnerability

    A vulnerability in the internal packet-processing functionality of the Cisco StarOS operating system running on virtual platforms could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of …

    Cisco Cisco ASR 5000 Series Software Network devices
  • High 8.8
    CVE-2015-1770 Exploited EPSS 35%

    Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office docume…

    KEV Mar 28, 2022