1731
Reference Description
CVE-2009-0040 Crafted PNG image leads to free of uninitialized pointer.
https://www.cve.org/CVERecord?id=CVE-2009-0040
CVE-2008-2934 Crafted GIF image leads to free of uninitialized pointer.
https://www.cve.org/CVERecord?id=CVE-2008-2934
CVE-2007-4682 Access of uninitialized pointer might lead to code execution.
https://www.cve.org/CVERecord?id=CVE-2007-4682
CVE-2007-4639 Step-based manipulation: invocation of debugging function before the primary
initialization function leads to access of an uninitialized pointer and code
execution.
https://www.cve.org/CVERecord?id=CVE-2007-4639
CVE-2007-4000 Unchecked return values can lead to a write to an uninitialized pointer.
https://www.cve.org/CVERecord?id=CVE-2007-4000
CVE-2007-2442 zero-length input leads to free of uninitialized pointer.
https://www.cve.org/CVERecord?id=CVE-2007-2442
CVE-2007-1213 Crafted font leads to uninitialized function pointer.
https://www.cve.org/CVERecord?id=CVE-2007-1213
CVE-2006-6143 Uninitialized function pointer in freed memory is invoked
https://www.cve.org/CVERecord?id=CVE-2006-6143
CVE-2006-4175 LDAP server mishandles malformed BER queries, leading to free of
uninitialized memory
https://www.cve.org/CVERecord?id=CVE-2006-4175
CVE-2006-0054 Firewall can crash with certain ICMP packets that trigger access of an
uninitialized pointer.
https://www.cve.org/CVERecord?id=CVE-2006-0054
CVE-2003-1201 LDAP server does not initialize members of structs, which leads to free of
uninitialized pointer if an LDAP request fails.
https://www.cve.org/CVERecord?id=CVE-2003-1201
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1399 Comprehensive Categorization: Memory Safety 1400 2525
Notes
Maintenance
There are close relationships between incorrect pointer dereferences and other weaknesses
related to buffer operations. There may not be sufficient community agreement regarding
these relationships. Further study is needed to determine when these relationships are chains,
composites, perspective/layering, or other types of relationships. As of September 2010, most of
the relationships are being captured as chains.
Terminology
Many weaknesses related to pointer dereferences fall under the general term of "memory
corruption" or "memory safety." As of September 2010, there is no commonly-used terminology
that covers the lower-level variants.
References
[REF-62]Mark Dowd, John McDonald and Justin Schuh. "The Art of Software Security
Assessment". 1st Edition. 2006. Addison Wesley.
CWE Version 4.14
CWE-825: Expired Pointer Dereference
CWE-825: Expired Pointer Dereference