CWE•Base•Incomplete•20 recent CVEs
CWE-824Access of Uninitialized Pointer
Description
The product accesses or uses a pointer that has not been initialized.
[object Object]
Common consequences
- Confidentiality→Read MemoryIf the uninitialized pointer is used in a read operation, it might not point to a valid memory location. An attacker might be able to read sensitive portions of memory.
- Availability→DoS: Crash, Exit, or RestartIf the uninitialized pointer references a memory location that is not accessible to the product, or points to a location that is "malformed" (such as NULL) or larger than expected by a read or write operation, then a crash may occur.
- Integrity,Confidentiality,Availability→Execute Unauthorized Code or CommandsIf the uninitialized pointer is used in a function call, or points to unexpected data in a write operation, then code execution may be possible. If the uninitialized pointer is used as a function call, then arbitrary functions could be invo
Related CWEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferCWE-119Improper Restriction of Operations within the Bounds of a Memory BufferCWE-119Improper Restriction of Operations within the Bounds of a Memory BufferCWE-119Improper Restriction of Operations within the Bounds of a Memory BufferCWE-125Out-of-bounds ReadCWE-787Out-of-bounds Write
Recent CVEs classified under this CWE
CVE-2026-1153275.32026-10-22CVE-2026-1096198.12026-10-21CVE-2026-1096189.82026-10-21CVE-2026-940182026-10-20CVE-2026-868476.52026-10-14CVE-2026-1106036.32026-10-14CVE-2026-1106026.32026-10-14CVE-2026-1097749.82026-10-13CVE-2026-499337.82026-10-05CVE-2026-660812026-10-02CVE-2026-475287.82026-09-30CVE-2026-1007889.82026-09-29CVE-2026-880545.52026-09-10CVE-2026-672817.52026-09-05CVE-2026-549200.02026-08-25CVE-2026-164097.52026-07-21CVE-2026-163539.82026-07-21CVE-2026-530425.52026-06-24CVE-2026-479087.82026-06-09CVE-2026-473206.12026-06-04