6768 matches found
Genie Path Traversal vulnerability via File Uploads
Overview Path Traversal Vulnerability via File Uploads in Genie Impact Any Genie OSS users running their own instance and relying on the filesystem to store file attachments submitted to the Genie application may be impacted. Using this technique, it is possible to write a file with any...
OSV-2024-456 Heap-buffer-overflow in ih264d_read_coeff4x4_cabac
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66989 Crash type: Heap-buffer-overflow READ 4 Crash state: ih264dreadcoeff4x4cabac ih264dparseresidual4x4cabac ih264dparseimbcabac...
OSV-2024-453 Use-of-uninitialized-value in encode_base64_differential
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68663 Crash type: Use-of-uninitialized-value Crash state: encodebase64differential fuzz-crypto.c...
OSV-2024-450 Use-of-uninitialized-value in ink_filepath_merge
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68468 Crash type: Use-of-uninitialized-value Crash state: inkfilepathmerge layoutrelative Layout::Layout...
OSV-2024-449 Use-of-uninitialized-value in YAML::Stream::Stream
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68461 Crash type: Use-of-uninitialized-value Crash state: YAML::Stream::Stream YAML::Scanner::Scanner YAML::Parser::Load...
OSV-2024-445 Security exception in com.github.javaparser.CommentsInserter.insertComments
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68730 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.lang.String.charAt java.base/sun.invoke.util.Wrapper.hashPrim...
OSV-2024-440 UNKNOWN READ
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66323 Crash type: UNKNOWN READ Crash state: NULL...
PT-2024-40767 · Git +1 · Jq
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A crash has been reported with a type of UNKNOWN READ and a crash state of NULL, as indicated by an OSS-Fuzz report. Recommendations: At the moment, there is no information about a newe...
OSV-2024-432 Use-of-uninitialized-value in ssl_ctx_make_profiles
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68524 Crash type: Use-of-uninitialized-value Crash state: sslctxmakeprofiles std::1::function::funcLLVMFuzzerTestOneInput::$39, std::1::allocatorL function.h...
OSV-2024-430 Use-of-uninitialized-value in ssl_str_to_group_ids
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68473 Crash type: Use-of-uninitialized-value Crash state: sslstrtogroupids SSLCTXset1groupslist std::1::function::funcLLVMFuzzerTestOneInput::$34, std::1::allocatorL...
OSV-2024-422 Use-of-uninitialized-value in cdc_task
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68505 Crash type: Use-of-uninitialized-value Crash state: cdctask fuzz.cc std::1::basicstring, std::1::allocatorch...
OSV-2024-420 Use-of-uninitialized-value in Lexer::Error
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68397 Crash type: Use-of-uninitialized-value Crash state: Lexer::Error ManifestParser::ParseRule ManifestParser::Parse...
OSV-2024-409 Use-of-uninitialized-value in Lexer::ReadToken
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68486 Crash type: Use-of-uninitialized-value Crash state: Lexer::ReadToken ManifestParser::Parse Parser::Load...
OSV-2024-404 Use-of-uninitialized-value in avifSequenceHeaderParse
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68568 Crash type: Use-of-uninitialized-value Crash state: avifSequenceHeaderParse avifDecoderReset avifDecoderParse...
OSV-2024-403 UNKNOWN READ in mem_planar_put_image_slow
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68566 Crash type: UNKNOWN READ Crash state: memplanarputimageslow pdf14cmykspotputimage gxupdatepdf14compositor...
OSV-2024-402 Stack-buffer-overflow in SwiftProtobuf.TextFormatScanner.
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68485 Crash type: Stack-buffer-overflow READ 1 Crash state: SwiftProtobuf.TextFormatScanner. SwiftProtobuf.TextFormatScanner. function signature specialization Arg...
PT-2024-40754 · Unknown · Swiftprotobuf
Name of the Vulnerable Software and Affected Versions: SwiftProtobuf affected versions not specified Description: The issue is related to a stack-buffer-overflow read in the SwiftProtobuf.TextFormatScanner function. This is indicated by an OSS-Fuzz report, which details a crash type of...
OSV-2024-400 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68380 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/sun.nio.cs.UTF8.updatePositions java.base/sun.nio.cs.UTF8$Encoder.encodeArrayLoop...
OSV-2024-398 Use-of-uninitialized-value in wabt::BinaryReaderObjdump::PrintInitExpr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65975 Crash type: Use-of-uninitialized-value Crash state: wabt::BinaryReaderObjdump::PrintInitExpr wabt::BinaryReaderObjdump::EndInitExpr wabt::BinaryReaderObjdump::EndGlobalInitExpr...