7558 matches found
freetype2:truetype: Heap-buffer-overflow in sfnt_load_table
Detailed Report: https://oss-fuzz.com/testcase?key=4592978079580160 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: truetype Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x50300000df00 Crash State: sfntloadtable template.cpp...
libxslt:xslt: Use-of-uninitialized-value in xmlStrdup
Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=6062352191782912 Project: libxslt Fuzzing Engine: libFuzzer Fuzz Target: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
Computational Attestations of Polynomial Integrity Towards Verifiable Machine-Learning
Machine-learning systems continue to advance at a rapid pace, demonstrating remarkable utility in various fields and disciplines. As these systems continue to grow in size and complexity, a nascent industry is emerging which aims to bring machine-learning-as-a-service MLaaS to market. Outsourcing...
PT-2025-29044
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The perf fuzzer identified a hard-lockup crash on a RaptorLake machine due to an issue in the icl update topdown event function. This crash occurs because the function is incorrectly...
Debian dla-4213 : curl - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4213 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4213-1 [email protected] https://www.debian.org/lts/security/...
[SECURITY] [DLA 4213-1] curl regression update
Debian LTS Advisory DLA-4213-1 [email protected] https://www.debian.org/lts/security/ Carlos Henrique Lima Melara June 11, 2025 https://wiki.debian.org/LTS Package : curl Version : 7.74.0-1.3+deb11u15 The initial fix for CVE-2023-27534 in curl made the handling of tilde way more strict ...
ffmpeg:ffmpeg_AV_CODEC_ID_SANM_fuzzer: Heap-buffer-overflow in process_frame_obj
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5466731806261248 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDSANMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7db5358caee4...
USN-7545-2 apport regression
USN-7545-1 fixed a vulnerability in Apport. The update introduced a regression that prevented core dumps from being generated inside containers. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Qualys discovered that Apport incorrectly handled metadata...
USN-7545-2: Apport regression
USN-7545-1 fixed a vulnerability in Apport. The update introduced a regression that prevented core dumps from being generated inside containers. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Qualys discovered that Apport incorrectly handled metadata...
AlphaSteer: Learning Refusal Steering with Principled Null-Space Constraint
As LLMs are increasingly deployed in real-world applications, ensuring their ability to refuse malicious prompts, especially jailbreak attacks, is essential for safe and reliable use. Recently, activation steering has emerged as an effective approach for enhancing LLM safety by adding a refusal...
Differentially Private Sparse Linear Regression with Heavy-Tailed Responses
As a fundamental problem in machine learning and differential privacy DP, DP linear regression has been extensively studied. However, most existing methods focus primarily on either regular data distributions or low-dimensional cases with irregular data. To address these limitations, this paper...
Membership Inference Attacks for Unseen Classes
Shadow model attacks are the state-of-the-art approach for membership inference attacks on machine learning models. However, these attacks typically assume an adversary has access to a background nonmember data distribution that matches the distribution the target model was trained on. We initiat...
Minor update(2) for Vivaldi Android Browser 7.4
Head to the Google Play Store and download the browser. Alternatively, you can download Vivaldi from Uptodown, the Android app store. Your rating for our browser matters. ⭐️ ⭐️ ⭐️ ⭐️ ⭐️ Enjoy! Changelog The following is a list of changes since the first 7.4 stable, minor update: Settings Enable...
Privacy Amplification through Synthetic Data: Insights from Linear Regression
Synthetic data inherits the differential privacy guarantees of the model used to generate it. Additionally, synthetic data may benefit from privacy amplification when the generative model is kept hidden. While empirical studies suggest this phenomenon, a rigorous theoretical understanding is stil...
Ubuntu: Security Advisory (USN-7537-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-7537-2: net-tools regression
USN-7537-1 fixed a vulnerability in net-tools that caused a regression. This update fixes the problem. Original advisory details: It was discovered that net-tools incorrectly handled certain inputs. An attacker could possible use this issue to cause a crash or execute arbitrary code...
USN-7537-2 net-tools regression
USN-7537-1 fixed a vulnerability in net-tools that caused a regression. This update fixes the problem. Original advisory details: It was discovered that net-tools incorrectly handled certain inputs. An attacker could possible use this issue to cause a crash or execute arbitrary code...
lucene:QueryParserFuzzer: Security exception in org.apache.lucene.util.AttributeImpl.clone
Detailed Report: https://oss-fuzz.com/testcase?key=6489537222344704 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: QueryParserFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.apache.lucene.util.AttributeImpl.clone...
[SECURITY] [DSA 5923-2] net-tools regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-5923-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 28, 2025 https://www.debian.org/security/faq -...
