OSV-2025-447 Use-of-uninitialized-value in spvtools::EmitNumericLiteral

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=423059200 Crash type: Use-of-uninitialized-value Crash state: spvtools::EmitNumericLiteral spvtools::disassemble::InstructionDisassembler::EmitOperand spvtools::disassemble::InstructionDisassembler::EmitInstructionImpl...

Disassembly As Weighted Interval Scheduling with Learned Weights

Disassembly is the first step of a variety of binary analysis and transformation techniques, such as reverse engineering, or binary rewriting. Recent disassembly approaches consist of three phases: an exploration phase, that overapproximates the binary's code; an analysis phase, that assigns...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from the failure to release tag owned storage in the DSA tagging protocol disassembly, which could lead to a...

CVE-2025-3426

The CVE-2025-3426 entry describes lack of reverse engineering protections in Philips IntelliSpace Portal binaries, enabling discovery of hardcoded credentials. Affected products are IntelliSpace Portal 12 and earlier and Advanced Visualization Workspace 15. Technical details from connected source...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a race condition in the xsk socket disassembly code that could lead to a null pointer dereference...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to free the page array when watchqueue is disassembled...

OESA-2025-1098 binutils security update

Binutils is a collection of binary utilities, including ar for creating, modifying and extracting from archives, as a family of GNU assemblers, gprof for displaying call graph profile data, ld the GNU linker, nm for listing symbols from object files, objcopy for copying and translating object...

Unspecified vulnerability in Linux kernel (CNVD-2025-01677)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a delay in the final release of struct net during netns disassembly in the net module. No details of the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a delay in the final release of struct net during netns disassembly in the net module...

CVE-2022-49003 nvme: fix SRCU protection of nvme_ns_head list

In the Linux kernel, the following vulnerability has been resolved: nvme: fix SRCU protection of nvmenshead list Walking the nvmenshead siblings list is protected by the head's srcu in nvmensheadsubmitbio but not nvmempathrevalidatepaths. Removing namespaces from the list also fails to synchroniz...

CVE-2022-49003

CVE-2022-49003 affects the Linux kernel NVMe subsystem. The issue arises from incomplete SRCU protection when walking the nvme_ns_head siblings list during nvme_mpath_revalidate_paths(), and from missing SRCU synchronization when removing namespaces from the list, which can allow a concurrent sca...

binutils:fuzz_objdump: Crash in print_insn

Detailed Report: https://oss-fuzz.com/testcase?key=5187892316536832 Project: binutils Fuzzing Engine: centipede Fuzz Target: fuzzobjdump Job Type: centipedeasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7d5d14c459b8 Crash State: printinsn disassemblesection...

binutils:fuzz_disas_ext-bfd_arch_i386: Crash in print_insn

Detailed Report: https://oss-fuzz.com/testcase?key=5198295868178432 Project: binutils Fuzzing Engine: centipede Fuzz Target: fuzzdisasext-bfdarchi386 Job Type: centipedeasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000014a8 Crash State: printinsn...

LaborOfficeFree 19.10 - MySQL Root Password Calculator Exploit

Exploit Title: LaborOfficeFree 19.10 MySQL Root Password Calculator - CVE-2024-1346 Exploit Author: Peter Gabaldon - https://pgj11.com/ Vendor Homepage: https://www.laborofficefree.com/ Software Link: https://www.laborofficefree.com/plans Version: 19.10 Tested on: Windows 10 CVE : CVE-2024-1346...

capstone:fuzz_disasmnext: Use-of-uninitialized-value in ARM_printer

Detailed Report: https://oss-fuzz.com/testcase?key=6223041365147648 Project: capstone Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ARMprinter csdisasm fuzzdisasm.c...

pyvex:irsb_fuzzer: Crash in getUInt

Project: https://github.com/angr/pyvex.git Detailed Report: https://oss-fuzz.com/testcase?key=6529505279475712 Project: pyvex Fuzzing Engine: libFuzzer Fuzz Target: irsbfuzzer Job Type: libfuzzerasanpyvex Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61c0003d0002 Crash State: getUI...

The vulnerability of the `tic4x_print_cond` function in the `opcodes/tic4x-dis.c` component of the GNU Binutils development environment allows a hacker to access confidential data.

The vulnerability of the tic4xprintcond function in the opcodes/tic4x-dis.c component of the GNU Binutils development environment is related to memory initialization errors. Exploiting this vulnerability allows an attacker to gain access to confidential data...

CVE-2023-46569

An out-of-bounds read in radare2 v.5.8.9 and before exists in the printinsn32fpu function of libr/arch/p/nds32/nds32-dis.h...

UBUNTU-CVE-2023-46570

An out-of-bounds read in radare2 v.5.8.9 and before exists in the printinsn32 function of libr/arch/p/nds32/nds32-dis.h...

capstone:fuzz_disasmnext: Use-of-uninitialized-value in DecodeCrosspathX3

Detailed Report: https://oss-fuzz.com/testcase?key=6427301589680128 Project: capstone Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: DecodeCrosspathX3 decodeToMCInst4...