16331 matches found
Improper Verification of Cryptographic Signature
Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature due to improper enforcement of the SIGHASH value in the signature verification process. An attacker can submit non-compliant signatures that are incorrectly accepted as valid by providing...
Spyware Allows Cyber Threat Actors to Target Users of Messaging Applications
CISA is aware of multiple cyber threat actors actively leveraging commercial spyware to target users of mobile messaging applications apps.1 These cyber actors use sophisticated targeting and social engineering techniques to deliver spyware and gain unauthorized access to a victim’s messaging app...
PT-2025-47966
Name of the Vulnerable Software and Affected Versions AMD uProf affected versions not specified Description An improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability. KSLR stands for Kernel Security Level...
AMD uProf security vulnerability
AMD uProf is a suite of performance analysis tools from AMD for analyzing the performance of x86 architecture applications on Windows, Linux and FreeBSD systems. A return value mishandling vulnerability exists in AMD uProf, which can be exploited by an attacker to cause a KSLR bypass and loss of...
CVE-2025-65494
The libcoap library (version 4.3.5 ) is vulnerable to a NULL pointer dereference within the get_san_or_cn_from_cert() function located in src/coap_openssl.c. This flaw allows remote attackers to trigger a denial of service (DoS) by providing a crafted X.509 certificate that causes sk_GENERAL_NAME...
OSV-2025-938 Use-of-uninitialized-value in comp_func_SourceOver_avx2
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=462673332 Crash type: Use-of-uninitialized-value Crash state: compfuncSourceOveravx2 blenduntransformedgeneric blenduntransformedgeneric...
PT-2025-54745
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=462673332 Crash type: Use-of-uninitialized-value Crash state: comp func SourceOver avx2 blend untransformed generic blend untransformed generic...
kimageformats:kimgio_heif_fuzzer: Use-of-uninitialized-value in void edge_filtering_luma_internal<unsigned char>
Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6094827621253120 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioheiffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
kimageformats:kimgio_raw_fuzzer: Use-of-uninitialized-value in LibRaw::identify
Detailed Report: https://oss-fuzz.com/testcase?key=5143724293423104 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgiorawfuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::identify...
kimageformats:kimgio_hdr_fuzzer: Use-of-uninitialized-value in HDRHandler::read
Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4576582451920896 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgiohdrfuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
tigervnc security update
An update is available for tigervnc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Virtual Network Computing VNC is a remote display system which allows users ...
mruby:mruby_fuzzer: Use-of-uninitialized-value in mrb_str_cmp_m
Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6046302728421376 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzermsanmruby Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
kimageformats:kimgio_xcf_fuzzer: Use-of-uninitialized-value in comp_func_SourceOver_avx2
Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4808714998841344 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioxcffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
pcapplusplus:FuzzTargetNg: Use-of-uninitialized-value in pcpp::HeaderField::HeaderField
Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4899165265264640 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTargetNg Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
kimageformats:kimgio_exr_fuzzer: Use-of-uninitialized-value in generic_unpack
Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6159289745211392 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioexrfuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
kimageformats:kimgio_heif_fuzzer: Use-of-uninitialized-value in residual_coding
Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4911893400846336 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioheiffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
CVE-2025-63889
The ThinkPHP framework version 5.0.24 is vulnerable to an Out-of-bounds Read (CWE-125) flaw. The root cause is located in the fetch function within the file thinkphprowser hink emplate.php, which allows an attacker to read arbitrary files by providing a crafted file path in a template value. Exp...
Systematically Deconstructing APVD Steganography and Its Payload with a Unified Deep Learning Paradigm
In the era of digital communication, steganography allows covert embedding of data within media files. Adaptive Pixel Value Differencing APVD is a steganographic method valued for its high embedding capacity and invisibility, posing challenges for traditional steganalysis. This paper proposes a...
Wazuh DecodeCiscat DoS
The vulnerability of the DecodeCiscat function in the Wazuh intrusion detection and prevention system is related to incorrect checking of the returned value. Exploiting this vulnerability could allow a malicious actor to trigger a service failure...
