Internet Bug Bounty: Uninitialized read in gdImageCreateFromXbm

This bug is present in gdImageCreateFromXbm method of ext/gd/libgd/gdxbm.c file. This method contains below mentioned lines. c ... unsigned int b; ... sscanfh, "%x", &b; for bit = 1; bit = maxbit; bit = bit 1 gdImageSetPixelim, x++, y, b & bit ? 1 : 0; ... So when sscanf method is not able to rea...

openthread/radio-receive-done-fuzzer: Stack-buffer-overflow in ot::Mle::Mle::HandleParentResponse

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5673129612935168 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Cra...

uwebsockets/MockedHelloWorld: Heap-buffer-overflow in helpers.h

Project: https://github.com/uNetworking/uWebSockets.git Detailed report: https://oss-fuzz.com/testcase?key=5756011190681600 Project: uwebsockets Fuzzer: libFuzzeruwebsocketsMockedHelloWorld Fuzz target binary: MockedHelloWorld Job Type: libfuzzerasanuwebsockets Platform Id: linux Crash Type:...

CVE-2018-19801

aubio v0.4.0 to v0.4.8 has a NULL pointer dereference in newaubiofilterbank via invalid nfilters...

envoy/h1_capture_direct_response_fuzz_test: Crash in Envoy::TestUtility::findCounter

Detailed report: https://oss-fuzz.com/testcase?key=5756178220449792 Project: envoy Fuzzer: libFuzzerenvoyh1capturedirectresponsefuzztest Fuzz target binary: h1capturedirectresponsefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f55425a59b0 Crash...

hostap/p2p-fuzzer-action: Use-of-uninitialized-value in p2p_send_action

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5679294988156928 Project: hostap Fuzzer: libFuzzerhostapp2p-fuzzer-action Fuzz target binary: p2p-fuzzer-action Job Type: libfuzzermsanhostap Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

harfbuzz/hb-subset-fuzzer: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5761434614497280 Project: harfbuzz Fuzzer: aflharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Cra...

Exploit for Improper Input Validation in Redhat Openshift

This is a pre-built vulnerable environment based on Docker-Compose, provided by the Vulhub project. The project is designed to help users learn about vulnerabilities and improve their defensive skills. The repository contains a collection of vulnerable environments, each with its own Docker-Compo...

keystone/fuzz_asm_sparc64be: Crash in llvm_ks::SmallVectorBase::grow_pod

Detailed report: https://oss-fuzz.com/testcase?key=5688354168897536 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmsparc64be Fuzz target binary: fuzzasmsparc64be Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7180004447e0 Crash State:...

imagemagick/ping_dng_fuzzer: Use-of-uninitialized-value in LibRaw::open_datastream

Detailed report: https://oss-fuzz.com/testcase?key=5731129560137728 Project: imagemagick Fuzzer: libFuzzerimagemagickpingdngfuzzer Fuzz target binary: pingdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

skia/sksl2spirv: Use-of-uninitialized-value in std::__1::__constrain_hash

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5680592508682240 Project: skia Fuzzer: libFuzzerskiasksl2spirv Fuzz target binary: sksl2spirv Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...

tinyxml2/xmltest: Use-of-uninitialized-value in tinyxml2::StrPair::ParseText

Detailed report: https://oss-fuzz.com/testcase?key=5752728054136832 Project: tinyxml2 Fuzzer: libFuzzertinyxml2xmltest Fuzz target binary: xmltest Job Type: libfuzzermsantinyxml2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: tinyxml2::StrPair::ParseText...

systemd - DynamicUser can Create setuid Binaries when Assisted by Another Process

systemd - DynamicUser can Create setuid Binaries when Assisted by Another Process This bug report describes a bug in systemd that allows a service with DynamicUser in collaboration with another service or user to create a setuid binary that can be used to access its UID beyond the lifetime of the...

Google Chrome 73.0.3683.103 V8 JavaScript Engine Denial Of Service

var arr1 = 0,1; function ObjCreatemake this.make = make; var obj1 = new ObjCreate; function main arr1.reducef3; Object.getOwnPropertyDescriptorsArray99.joinobj1.make; function f3 obj1"make" = RegExpArray60000.join"CCC";...

karchive/karchive_fuzzer: Use-of-uninitialized-value in qstrlen

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5640360216231936 Project: karchive Fuzzer: libFuzzerkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

CVE-2019-11035

When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exifiifaddvalue function. This may lead to information disclosure or crash...

sqlite3/ossfuzz: Use-of-uninitialized-value in accessPayload

Detailed report: https://oss-fuzz.com/testcase?key=5707266847670272 Project: sqlite3 Fuzzer: libFuzzersqlite3ossfuzz Fuzz target binary: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: accessPayload vdbeMemFromBtreeResiz...

lzma/lzma2enc_fuzzer: Heap-buffer-overflow in OutputBuffer::Write

Detailed report: https://oss-fuzz.com/testcase?key=5186974492655616 Project: lzma Fuzzer: afllzmalzma2encfuzzer Fuzz target binary: lzma2encfuzzer Job Type: aflasanlzma Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x60c0000003c0 Crash State: OutputBuffer::Write...

Internet Bug Bounty: Uninitialized read in exif_process_IFD_in_MAKERNOTE

This bug is present in exifprocessIFDinMAKERNOTE method of ext/exif/exif.c file. Detailed description and steps to reproduce for this bug is present in bug report submitted to php.net. Bug Report : https://bugs.php.net/bug.php?id=77563 PHP version : 7.1.26 CVE-ID : 2019-9638 Impact Uninitialized...

unicorn/fuzz_emu_mips_32be: Crash in mips_release_mips

Project: https://github.com/unicorn-engine/unicorn.git Detailed report: https://oss-fuzz.com/testcase?key=5663967185207296 Project: unicorn Fuzzer: libFuzzerunicornfuzzemumips32be Fuzz target binary: fuzzemumips32be Job Type: libfuzzerasanunicorn Platform Id: linux Crash Type: UNKNOWN WRITE Crash...