CWE-456

9 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

Critical 0High 5Medium 4Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-46300
net: skbuff: preserve shared-frag marker during coalescing
Linux · Linux
ExploitedHigh7.8

CVE-2026-46300
net: skbuff: preserve shared-frag marker during coalescing
Linux · Linux
ExploitedHigh7.8
CVE-2024-54131
Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3)
kolide · launcher
High7.3
CVE-2024-9780
Missing Initialization of a Variable in Wireshark
Wireshark Foundation · Wireshark
High7.8
CVE-2024-32878
Use of Uninitialized Variable Vulnerability in llama.cpp
ggerganov · llama.cpp
High7.1
CVE-2023-20226
A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software could allow an unauthenticated, remote…
Cisco · Cisco IOS XE Software
High8.6
CVE-2021-40403
An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev (commit b5f1eacd), and Gerbv forked…
Gerbv
Medium5.8
CVE-2021-34703
Cisco IOS and IOS XE Software Link Layer Discovery Protocol Denial of Service Vulnerability
Cisco · Cisco IOS
Medium6.8
CVE-2019-3836
It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be…
gnutls · gnutls
Medium5.9
CVE-2018-14641
A security flaw was found in the ip_frag_reasm() function in net/ipv4/ip_fragment.c in the Linux kernel from 4.19-rc1 to 4.19-rc3 inclusive, which can cause a…
The Linux Foundation · kernel
Medium6.5