← Back
CWE-824

305 CVEs • Abstraction: Base

Access of Uninitialized Pointer

The product accesses or uses a pointer that has not been initialized.

JSON object

Loading...

CVEs (305)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2007-1213
1Microsoft
1Windows 2000
Apr 23, 2026
Apr 4, 2007
N/A· v4
N/A· v3
7.2 HIGH· v2
The TrueType Fonts rasterizer in Microsoft Windows 2000 SP4 allows local users to gain privileges via crafted TrueType fonts, which result in an uninitialized function pointer.
CVE-2006-4175
1Sun
2Java System Directory Server
One Directory Server
Apr 23, 2026
Mar 26, 2007
N/A· v4
N/A· v3
7.8 HIGH· v2
The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote attackers to cause a denial of service (crash) via malformed queries, probably malf...Show more
The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote attackers to cause a denial of service (crash) via malformed queries, probably malformed BER queries, which trigger a free of uninitialized memory locations.Show less
CVE-2006-6143
2Canonical
Mit
2Kerberos 5
Ubuntu Linux
Apr 23, 2026
Dec 31, 2006
N/A· v4
N/A· v3
9.3 HIGH· v2
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memor...Show more
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.Show less
CVE-2006-0054
1Freebsd
1Freebsd
Apr 16, 2026
Jan 11, 2006
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service (firewall crash) via ICMP IP fragments that match a reset, reject or unreach action, which leads to an access of an uninitiali...Show more
The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service (firewall crash) via ICMP IP fragments that match a reset, reject or unreach action, which leads to an access of an uninitialized pointer.Show less
CVE-2003-1201
1Openldap
1Openldap
Apr 16, 2026
Mar 20, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slap_passwd_parse function does not return LDAP_SUCCESS, attempts to free an uninitialized pointer, which allows remote...Show more
ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slap_passwd_parse function does not return LDAP_SUCCESS, attempts to free an uninitialized pointer, which allows remote attackers to cause a denial of service (segmentation fault).Show less