VYPR

CWE-457

Use of Uninitialized Variable

VariantDraftLikelihood: High

Description

The code uses a variable that has not been initialized, leading to unpredictable or unintended results.

In some languages such as C and C++, stack variables are not initialized by default. They generally contain junk data with the contents of stack memory before the function was invoked. An attacker can sometimes control or read these contents. In other languages or conditions, a variable that is not explicitly initialized can be given a default value that has security implications, depending on the logic of the program. The presence of an uninitialized variable can sometimes indicate a typographic error in the code.

Hierarchy (View 1000)

Parents

Children

none

CVEs mapped to this weakness (245)

page 13 of 13
  • CVE-2025-53644CriJul 17, 2025
    Opencv
    Opencv
    risk 0.00cvss 9.8epss 0.00

    OpenCV is an Open Source Computer Vision Library. Versions 4.10.0 and 4.11.0 have an uninitialized pointer variable on stack that may lead to arbitrary heap buffer write when reading crafted JPEG images. Version 4.12.0 fixes the vulnerability.

  • CVE-2021-41253MedNov 8, 2021
    Zydis
    Zydis
    risk 0.00cvss 5.9epss 0.02

    Zydis is an x86/x86-64 disassembler library. Users of Zydis versions v3.2.0 and older that use the string functions provided in `zycore` in order to append untrusted user data to the formatter buffer within their custom formatter hooks can run into heap buffer overflows. Older…

  • CVE-2021-3928HigNov 5, 2021
    Vim
    Vim
    risk 0.00cvss 7.8epss 0.01

    vim is vulnerable to Use of Uninitialized Variable

  • CVE-2019-1010319MedJul 11, 2019
    Wavpack
    Wavpack
    risk 0.00cvss 5.5epss 0.01

    WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseWave64HeaderConfig (wave64.c:211). The attack vector is: Maliciously crafted .wav file. The fixed version is:…

  • CVE-2019-1010317MedJul 11, 2019
    Wavpack
    Wavpack
    risk 0.00cvss 5.5epss 0.01

    WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseCaffHeaderConfig (caff.c:486). The attack vector is: Maliciously crafted .wav file. The fixed version is:…