Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix pass-by-value structs causing MSAN warnings vidtvtsnullwriteinto and vidtvtspcrwriteinto take their argument structs by value, resulting in MSAN reports of uninit-value warnings. Although only vidtvtsnullwritein...

llvm:llvm-parse-assembly-fuzzer: Use-of-uninitialized-value in llvm::MetadataTracking::track

Detailed Report: https://oss-fuzz.com/testcase?key=5338027347214336 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-parse-assembly-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: llvm::MetadataTracking::track...

php:php-fuzz-unserialize: Use-of-uninitialized-value in zim_Time_Duration___unserialize

Detailed Report: https://oss-fuzz.com/testcase?key=6431772334948352 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-unserialize Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: zimTimeDurationunserialize zendcallfunction...

libaom:av1_enc_fuzzer: Crash in av1_cdef_mse_calc_frame_mt

Detailed Report: https://oss-fuzz.com/testcase?key=4914219326439424 Project: libaom Fuzzing Engine: libFuzzer Fuzz Target: av1encfuzzer Job Type: libfuzzermsanlibaom Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000000002b90 Crash State: av1cdefmsecalcframemt av1cdefsearch...

mruby:mruby_fuzzer: Use-of-uninitialized-value in str_escape

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4670028797247488 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzermsanmruby Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::TileCodingParams::readMct

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5027344826564608 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id...

llvm:llvm-isel-fuzzer--arm-O2: Use-of-uninitialized-value in createSlotTracker

Detailed Report: https://oss-fuzz.com/testcase?key=6013369242157056 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-isel-fuzzer--arm-O2 Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: createSlotTracker...

llvm:llvm-opt-fuzzer--x86_64-irce: Use-of-uninitialized-value in llvm::ScalarEvolution::createSCEV

Detailed Report: https://oss-fuzz.com/testcase?key=6058550435315712 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-opt-fuzzer--x8664-irce Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: llvm::ScalarEvolution::createSCEV...

ffmpeg:ffmpeg_AV_CODEC_ID_LIBVPX_VP9_fuzzer: Use-of-uninitialized-value in vpx_quantize_b_avx2

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5368579776905216 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDLIBVPXVP9fuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

mruby:mruby_fuzzer: Use-of-uninitialized-value in pm_integer_parse

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4573215293505536 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzermsanmruby Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

imagemagick:encoder_jxl_fuzzer: Use-of-uninitialized-value in jxl::PerformMulBlending

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6299345553784832 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderjxlfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

lcms:cms_transform_all_fuzzer: Use-of-uninitialized-value in XFormSampler16

Detailed Report: https://oss-fuzz.com/testcase?key=5905566678188032 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmstransformallfuzzer Job Type: libfuzzermsanlcms Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: XFormSampler16 cmsStageSampleCLut16bit...

assimp:assimp_fuzzer: Use-of-uninitialized-value in Assimp::LWOImporter::CopyFaceIndicesLWO2

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5264547070672896 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

njs:njs_process_script_fuzzer: Use-of-uninitialized-value in njs_utf8_decode

Project: http://hg.nginx.org/njs https://github.com/nginx/njs.git Detailed Report: https://oss-fuzz.com/testcase?key=5302473343172608 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

cmake:cmArchiveExtractFuzzer: Use-of-uninitialized-value in cab_read_ahead_cfdata

Project: https://gitlab.kitware.com/cmake/cmake.git Detailed Report: https://oss-fuzz.com/testcase?key=5912907245486080 Project: cmake Fuzzing Engine: libFuzzer Fuzz Target: cmArchiveExtractFuzzer Job Type: libfuzzermsancmake Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

imagemagick:encoder_icon_fuzzer: Use-of-uninitialized-value in WriteICONImage

Detailed Report: https://oss-fuzz.com/testcase?key=5923814046498816 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodericonfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: WriteICONImage WriteImage...

libvpx:vpx_enc_fuzzer_vp8: Use-of-uninitialized-value in vp8_compute_skin_block

Project: https://chromium.googlesource.com/webm/libvpx Detailed Report: https://oss-fuzz.com/testcase?key=6574969609060352 Project: libvpx Fuzzing Engine: libFuzzer Fuzz Target: vpxencfuzzervp8 Job Type: libfuzzermsanlibvpx Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

libvpx:vpx_enc_fuzzer_vp8: Use-of-uninitialized-value in vpx_variance16x16_avx2

Project: https://chromium.googlesource.com/webm/libvpx Detailed Report: https://oss-fuzz.com/testcase?key=5299502767734784 Project: libvpx Fuzzing Engine: libFuzzer Fuzz Target: vpxencfuzzervp8 Job Type: libfuzzermsanlibvpx Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

wolfssl:cryptofuzz-sp-math-all-8bit: Use-of-uninitialized-value in sp_exptmod_ex

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6451249854873600 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-sp-math-all-8bit Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

binutils:fuzz_as: Use-of-uninitialized-value in demand_empty_rest_of_line

Detailed Report: https://oss-fuzz.com/testcase?key=5905500238839808 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzas Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: demandemptyrestofline scomminternal...