CWE-665.

Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates.

• Juniper Networks Session Smart Router
• CWE-665

Yoosee GM8135S Camera WiFi Configuration wpa_supplicantX.conf initialization

• Yoosee GM8135S Camera
• CWE-665

Junos OS and Junos OS Evolved: A remote BGP peer causes an rpd crash when long-lived graceful restart (LLGR) is used

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-665

Memory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUs

• Qt_for_MCUs
• Memory corruption
• CWE-590

MISP Correlation Engine Fails to Refresh When Event Distribution or Sharing Group Changes

• MISP
• Broken access control
• CWE-665

Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device.

• ASUS Motherboard(PRIME Z390-A )
• ASUS Motherboard(PRIME Z390-A/H10 )
• CWE-665

Suricata smtp/mime: incomplete state reset allows detection bypass

• OISF suricata
• CWE-665

Google Chrome: Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36…

• Google Chrome
• CWE-665

Google Chrome: Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a…

• Google Chrome
• CWE-665

device property: initialize the remaining fields of fwnode_handle in fwnode_init()

• Linux kernel
• CWE-665

Uninitialized mutex in TLS trusted-credential backend causes kernel NULL-deref DoS under contention

• zephyr
• CWE-665

Intel(R) Active Management Technology (Intel(R) AMT)…: Improper initialization in some firmware for some Intel(R) Active Management Technology…

• Intel(R) Active Management Technology (Intel(R) AMT), and some Intel(R) Standard Manageability may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
• CWE-665

correct buffer checks for DM_OP hypercalls

• Xen
• CWE-665

A memory initialization issue was addressed with improved memory handling.

• Apple iOS and iPadOS
• Apple macOS
• CWE-665

mm/slab: do not limit zeroing to orig_size when only red zoning is enabled

• Linux kernel
• CWE-665

igc: set tx buffer type for SMD frames

• Linux kernel
• CWE-665

NFSD: Fix SECINFO_NO_NAME decode error cleanup

• Linux kernel
• CWE-665

Quicly is vulnerable to stateless reset injection

• h2o quicly
• CWE-345
• CWE-665

Ubiquiti Inc UniFi Protect Application: A malicious actor with access to the network and under certain conditions could exploit…

• Ubiquiti Inc UniFi Protect Application
• CWE-665

CoreWCF NetNamedPipe transport accepts attach to a pre-existing named pipe instance

• Race condition
• CWE-665

<1.8.1 || >=1.9.0, <1.9.1 · fixed in 1.8.1, 1.9.1

DOMPurify: Permanent `ALLOWED_ATTR` pollution via `setConfig()` bypassing the hook clone-guard (incomplete fix of the 3.4.7 hook-pollution patch)

• Cross-site scripting (XSS)
• CWE-471

<3.4.11 · fixed in 3.4.11

Docker Sandboxes ICMP egress restriction bypass after daemon restart

• Docker Sandboxes
• CWE-665
• CWE-923

aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence

• CWE-665

<3.14.1 · fixed in 3.14.1

Intel platforms: Improper initialization in the UEFI firmware for some Intel platforms within Ring 0: Bare…

• Intel platforms
• CWE-665

cifs: some missing initializations on replay

• Linux kernel
• CWE-665

Meridian: Multiple defense-in-depth gaps (collection/depth caps, telemetry, retry, fan-out)

• Information disclosure
• Denial of service

>=2.0.0, <2.1.1 · fixed in 2.1.1

iccDEV: DoS in CIccCLUT::Iterate() & CIccMBB::Describe()

• InternationalColorConsortium iccDEV
• CWE-562
• CWE-665

media: dvb-core: fix wrong reinitialization of ringbuffer on reopen

• Linux kernel
• CWE-665

A potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that could allow a local privileged user to modify data and execute arbitrary code.

• Lenovo ThinkPad T14 Gen 5 BIOS
• Lenovo ThinkPad P14s Gen 5 BIOS
• CWE-665

An issue was discovered in LBS in Samsung Mobile Processor Exynos 2200.

• CWE-665

filippo.io/edwards25519 MultiScalarMult produces invalid results or undefined behavior if receiver is not the identity

• CWE-665

<1.1.1 · fixed in 1.1.1

Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause misidentification of I/O memory, potentially resulting in a loss of guest memory…

• AMD EPYC™ 9004 Series Processors
• AMD EPYC™ 7003 Series Processors
• CWE-665

Intel(R) Ethernet 800-Series: Improper initialization for some ESXi kernel mode driver for the Intel(R) Ethernet…

• Intel(R) Ethernet 800-Series
• CWE-665

x86: incomplete IBPB for vCPU isolation

• Xen
• CWE-665
• CWE-693

erspan: Initialize options_len before referencing options.

• Linux kernel
• CWE-665

Open5GS PFCP handler.c ogs_pfcp_handle_create_pdr initialization

• Open5GS
• CWE-665

Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical access to gain un-authorized access to a locked Storage Device or create a Denial of…

• Solidigm™ D5-P5316, D5-P5430, D7-P5520/D7-P5620, D5-P5336
• CWE-665

BMC Control-M/Agent memory corruption in SSL/TLS communication

• BMC Control-M/Agent
• Memory corruption
• Denial of service

Improper initialization of CPU cache memory could allow a privileged attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity.

• AMD EPYC™ 9004 Series Processors
• AMD EPYC™ Embedded 9004 Series Processors
• CWE-665

ArrayQueue's push_front is not panic-safe

• CWE-665

>=0.3.0, <0.4.0 · fixed in 0.4.0

IdMap from_iter may lead to uninitialized memory being freed on drop

• CWE-665

>=0.1.6, <0.2.2 · fixed in 0.2.2

Intel(R) I350 Series Ethernet: Improper initialization in the Linux kernel-mode driver for some Intel(R) I350 Series…

• Intel(R) I350 Series Ethernet
• CWE-665

ThirdPartyVideo SetVariable Vulnerability

• AMI AptioV
• CWE-665

The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller (those registe…

• The GNU C Library glibc
• CWE-665

The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those register…

• The GNU C Library glibc
• CWE-665

Intel(R) Server D50DNP and M50FCP boards: Improper initialization in the UEFI firmware for the Intel(R) Server D50DNP and M50FCP…

• Intel(R) Server D50DNP and M50FCP boards
• CWE-665

@misskey-dev/summaly Redirect Filter Bypass

• Open redirect
• CWE-665

>=3.0.1, <5.2.1 · fixed in 5.2.1

A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnq_Sigmoid of the component Quantized Sigmoid Module. The manipulation of...

• CWE-665

· no fixed version yet

An issue in Bento4 v1.6.0-641 allows an attacker to trigger a segmentation fault via Ap4Atom.cpp, specifically in AP4_AtomParent::RemoveChild, during the execution of mp4encrypt with a specially craf…

• CWE-665

Intel(R) Processors: Improper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors…

• Intel(R) Processors
• CWE-665

Intel(R) AMT and Intel(R) Standard Manageability: Improper initialization in the firmware for some Intel(R) AMT and Intel(R) Standard…

• Intel(R) AMT and Intel(R) Standard Manageability
• CWE-665

Rockwell Automation Arena® Uninitialized Vulnerability

• Rockwell Automation Arena®
• CWE-665

Improper Initialization of `imc` Scheme Leading to `SIGABRT` in ION-DTN BPv7

• nasa-jpl ION-DTN
• CWE-665

Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM)…: Improper initialization in firmware for some Intel(R) PROSet/Wireless Software and…

• Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi
• CWE-665

Unbounded allocation in ctl(4) CAM Target Layer

• FreeBSD
• CWE-665

Elrond-go has improper initialization in github.com/ElrondNetwork/elrond-go

• CWE-665

<1.3.35 · fixed in 1.3.35

Improper privilege management in Intel(R) Ethernet Network Controllers and Adapters

• Intel(R) Ethernet Network Controllers and Adapters
• Privilege escalation
• CWE-665

Intel(R) CSME: Improper initialization in firmware for some Intel(R) CSME may allow a privileged user to…

• Intel(R) CSME
• CWE-665

Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, potentially resulting in…

• AMD EPYC™ 7003 Series Processors
• AMD EPYC™ 9004 Series Processors
• CWE-665

Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR17, 4.0.0 SR07, 4.1.0 SR04, 4.2.0 SR04, and 4.3.0 SR02 fails to validate file attributes during the Pre-Boot Authorization (PBA) process.

• CWE-665