Vulnerabilities (CVE)

Filtered by CWE-908
Total 505 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-45703 1 Tectonic Xdv Project 1 Tectonic Xdv 2022-01-06 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the tectonic_xdv crate before 0.1.12 for Rust. XdvParser::<T>::process may read from uninitialized memory locations.
CVE-2021-45694 1 Rdiff Project 1 Rdiff 2022-01-06 5.0 MEDIUM 7.5 HIGH
An issue was discovered in the rdiff crate through 2021-02-03 for Rust. Window may read from uninitialized memory locations.
CVE-2021-45693 1 Messagepack-rs Project 1 Messagepack-rs 2022-01-06 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserialize_string_primitive may read from uninitialized memory locations.
CVE-2021-45692 1 Messagepack-rs Project 1 Messagepack-rs 2022-01-06 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserialize_extension_others may read from uninitialized memory locations.
CVE-2021-45691 1 Messagepack-rs Project 1 Messagepack-rs 2022-01-06 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserialize_string may read from uninitialized memory locations.
CVE-2021-45690 1 Messagepack-rs Project 1 Messagepack-rs 2022-01-06 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserialize_binary may read from uninitialized memory locations.
CVE-2021-45689 1 Gfx-auxil Project 1 Gfx-auxil 2022-01-06 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the gfx-auxil crate through 2021-01-07 for Rust. gfx_auxil::read_spirv may read from uninitialized memory locations.
CVE-2021-45688 1 Ash Project 1 Ash 2022-01-06 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the ash crate before 0.33.1 for Rust. util::read_spv may read from uninitialized memory locations.
CVE-2020-36511 1 Bite Project 1 Bite 2022-01-06 5.0 MEDIUM 7.5 HIGH
An issue was discovered in the bite crate through 2020-12-31 for Rust. read::BiteReadExpandedExt::read_framed_max may read from uninitialized memory locations.
CVE-2020-36514 1 Acc Reader Project 1 Acc Reader 2022-01-06 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the acc_reader crate through 2020-12-27 for Rust. fill_buf may read from uninitialized memory locations.
CVE-2021-45686 1 Csv-sniffer Project 1 Csv-sniffer 2022-01-06 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the csv-sniffer crate through 2021-01-05 for Rust. preamble_skipcount may read from uninitialized memory locations.
CVE-2021-45685 1 Columnar Project 1 Columnar 2022-01-06 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the columnar crate through 2021-01-07 for Rust. ColumnarReadExt::read_typed_vec may read from uninitialized memory locations.
CVE-2021-45684 1 Flumedb Project 1 Flumedb 2022-01-06 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the flumedb crate through 2021-01-07 for Rust. read_entry may read from uninitialized memory locations.
CVE-2021-45683 1 Binjs Io Project 1 Binjs Io 2022-01-06 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the binjs_io crate through 2021-01-03 for Rust. The Read method may read from uninitialized memory locations.
CVE-2021-45682 1 Bronzedb-protocol Project 1 Bronzedb-protocol 2022-01-06 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the bronzedb-protocol crate through 2021-01-03 for Rust. ReadKVExt may read from uninitialized memory locations.
CVE-2019-18602 2 Debian, Openafs 2 Debian Linux, Openafs 2022-01-01 5.0 MEDIUM 7.5 HIGH
OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to an information disclosure vulnerability because uninitialized scalars are sent over the network to a peer.
CVE-2019-18603 2 Debian, Openafs 2 Debian Linux, Openafs 2022-01-01 4.3 MEDIUM 5.9 MEDIUM
OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to information leakage upon certain error conditions because uninitialized RPC output variables are sent over the network to a peer.
CVE-2020-0007 1 Google 1 Android 2022-01-01 2.1 LOW 5.5 MEDIUM
In flattenString8 of Sensor.cpp, there is a possible information disclosure of heap memory due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-141890807
CVE-2020-0006 1 Google 1 Android 2022-01-01 4.3 MEDIUM 6.5 MEDIUM
In rw_i93_send_cmd_write_single_block of rw_i93.cc, there is a possible information disclosure of heap memory due to uninitialized data. This could lead to remote information disclosure in the NFC server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-139738828
CVE-2020-6792 2 Canonical, Mozilla 2 Ubuntu Linux, Thunderbird 2022-01-01 4.3 MEDIUM 4.3 MEDIUM
When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents. This vulnerability affects Thunderbird < 68.5.