16218 matches found
pcapplusplus:FuzzTargetNg: Use-of-uninitialized-value in pcpp::TelnetLayer::getNextCommandField
Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4555774813863936 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTargetNg Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
GHSA-Q7R4-HC83-HF2Q Gotenberg has ExifTool stdin argument injection via metadata value newlines (bypass of key sanitization fix)
Vulnerability Details CWE: CWE-20 - Improper Input Validation The metadata value sanitization introduced in v8.30.1 commit 405f106 only validates metadata KEYS via safeKeyPattern regex. Metadata VALUES are passed unsanitized to go-exiftool SetString, which writes them as fmt.Fprintlne.stdin,...
poppler:qt_search_fuzzer: Use-of-uninitialized-value in Gfx::doRadialShFill
Detailed Report: https://oss-fuzz.com/testcase?key=6416796692578304 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target: qtsearchfuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Gfx::doRadialShFill Gfx::opShFill Gfx::go...
selinux:checkpolicy-fuzzer: Use-of-uninitialized-value in hashtab_map
Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=5301794527051776 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: checkpolicy-fuzzer Job Type: libfuzzermsanselinux Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
Amazon Linux 2023 : perl-Net-CIDR-Lite (ALAS2023-2026-1624)
"It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1624 advisory. Net::CIDR::Lite versions before 0.23 for Perl does not validate IPv6 group count, which may allow IP ACL bypass. packipv6 does not check that uncompressed IPv6 addresses without :: have exact...
PT-2026-42355
Multiple security vulnerabilities affect the atlantis package. The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. See references for individual vulnerability details...
PT-2026-42356
Multiple security vulnerabilities affect the atlantis-fips package. The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. See references for individual vulnerability details...
PT-2026-42304
Multiple security vulnerabilities affect the atlantis-fips package. The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. See references for individual vulnerability details...
JLSEC-2026-306
HDF5 Library through 1.14.3 may use an uninitialized value in H5Aattrreleasetable in H5Aint.c...
CLSA-2026-1777454082 pcre2: Fix of 2 CVEs
CVE-2022-1586: fix out-of-bounds read in JIT compilexclassmatchingpath - CVE-2022-41409: diagnose negative repeat value in pcre2test...
OSV-2026-650 Use-of-uninitialized-value in Mat_int32Swap
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=506942183 Crash type: Use-of-uninitialized-value Crash state: Matint32Swap ReadCompressedInt32Data MatVarRead5...
PT-2026-39312
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=506942183 Crash type: Use-of-uninitialized-value Crash state: Mat int32Swap ReadCompressedInt32Data Mat VarRead5...
PT-2026-39354
HDF5 Library through 1.14.3 may use an uninitialized value in H5A attr release table in H5Aint.c...
The vulnerability of the moxartprobe() function in the drivers/mmc/host/moxart-mmc.c file of the MMC/SD/SDIO card driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the moxartprobe function in the drivers/mmc/host/moxart-mmc.c file of the MMC/SD/SDIO card driver for the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `sc7180_lpass_init()` function in the sound module/soc/qcom/lpass-sc7180.c, which is part of the Linux operating system’s SoC kernel support for audio, allows a hacker to cause a service failure.
The vulnerability of the sc7180lpassinit function in the sound/soc/qcom/lpass-sc7180.c sound support module of the Linux operating system’s SoC kernel is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the rtsx_usb_sdmmc_drv_probe() function in the mmc/host/rtsx_usb_sdmmc.c driver for MMC/SD/SDIO cards in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the rtsxusbsdmmcdrvprobe function in the mmc/host/rtsxusbsdmmc.c driver for MMC/SD/SDIO cards in the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the wmt_mci_probe() function in the drivers/mmc/host/wmt-sdmmc.c file of the MMC/SD/SDIO card driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the wmtmciprobe function in the drivers/mmc/host/wmt-sdmmc.c file of the MMC/SD/SDIO card driver for the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the cros_usbpd_notify_init() function in the drivers/platform/chrome/cros_usbpd_notify.c module, which is part of the Chrome OS hardware support for Linux kernel-based devices, allows a hacker to trigger a service failure.
The vulnerability of the crosusbpdnotifyinit function in the drivers/platform/chrome/crosusbpdnotify.c module, which is part of the Chrome OS hardware support for Linux kernel-based operating systems, stems from the lack of checking the return value. Exploiting this vulnerability could allow an...
The vulnerability of the `ionic_devlink_alloc()` function in the `drivers/net/ethernet/pensando/ionic/ionic_devlink.c` file of the Pensando Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ionicdevlinkalloc function in the drivers/net/ethernet/pensando/ionic/ionicdevlink.c file of the Pensando Ethernet network adapter driver for the Linux operating system is related to the lack of a check on the returned value. Exploiting this vulnerability could allow an...