Vulnerabilities > Missing Initialization of Resource

DATE CVE VULNERABILITY TITLE RISK
2019-11-08 CVE-2019-12410 Missing Initialization of Resource vulnerability in Apache Arrow
While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet.
network
low complexity
apache CWE-909
7.5
2019-11-08 CVE-2019-12408 Missing Initialization of Resource vulnerability in Apache Arrow 0.14.0/0.14.1
It was discovered that the C++ implementation (which underlies the R, Python and Ruby implementations) of Apache Arrow 0.14.0 to 0.14.1 had a uninitialized memory bug when building arrays with null values in some cases.
network
low complexity
apache CWE-909
7.5
2019-09-27 CVE-2019-9321 Missing Initialization of Resource vulnerability in Google Android 10.0
In libavc, there is a missing variable initialization.
network
google CWE-909
4.3
2019-09-27 CVE-2019-9320 Missing Initialization of Resource vulnerability in Google Android 10.0
In libavc, there is a missing variable initialization.
network
google CWE-909
4.3
2019-09-27 CVE-2019-9319 Missing Initialization of Resource vulnerability in Google Android 10.0
In libavc, there is a missing variable initialization.
network
google CWE-909
4.3
2019-09-27 CVE-2019-9318 Missing Initialization of Resource vulnerability in Google Android 10.0
In libhevc, there is a missing variable initialization.
network
google CWE-909
4.3
2019-09-27 CVE-2019-9317 Missing Initialization of Resource vulnerability in Google Android 10.0
In libstagefright, there is a missing variable initialization.
network
google CWE-909
4.3
2019-09-27 CVE-2019-9316 Missing Initialization of Resource vulnerability in Google Android 10.0
In libstagefright, there is a missing variable initialization.
network
google CWE-909
4.3
2019-09-27 CVE-2019-9315 Missing Initialization of Resource vulnerability in Google Android 10.0
In libhevc, there is a missing variable initialization.
network
google CWE-909
4.3
2019-09-27 CVE-2019-9314 Missing Initialization of Resource vulnerability in Google Android 10.0
In libavc, there is a missing variable initialization.
network
google CWE-909
4.3