Lucene search
+L

6 matches found

OSS-Fuzz
OSS-Fuzz
•added 2026/04/25 5:27 p.m.•12 views

kimageformats:kimgio_jxr_fuzzer: Use-of-uninitialized-value in JXRHandlerPrivate::readTextMeta

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4631064651038720 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgiojxrfuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

5.4AI score
SaveExploits0
attackerkb
attackerkb
•added 2026/04/10 4:03 p.m.•12 views

CVE-2026-35659

OpenClaw before 2026.3.22 contains a service discovery vulnerability where TXT metadata from Bonjour and DNS-SD could influence CLI routing even when actual service resolution failed. Attackers can exploit unresolved hints to steer routing decisions to unintended targets by providing malicious...

5.1CVSS5.8AI score0.00117EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/04/10 12:00 a.m.•26 views

OpenClaw data falsification vulnerability

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.3.22 had a data manipulation vulnerability. This vulnerability stemmed from the fact that TXT metadata in service discovery could affect CLI routing, allowing attackers to redirec...

6.3CVSS5.8AI score0.00117EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/03/26 7:50 p.m.•32 views

OpenClaw: Bonjour/DNS-SD TXT metadata steers CLI routing after failed service resolution

Summary Bonjour and DNS-SD TXT metadata could still steer CLI routing even when actual service resolution failed, allowing unresolved hints to influence the chosen target. Affected Packages / Versions - Package: openclaw npm - Affected: = 2026.3.22 - Latest released tag checked: v2026.3.23-2...

6.3CVSS5.8AI score0.00117EPSS
SaveExploits0References6Affected Software1
osv_ghsa
osv_ghsa
•added 2026/02/24 3:46 p.m.•20 views

GHSA-V994-63CG-9WJ3 ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile

A crafted profile contain invalid IPTC data may cause an infinite loop when writing it with IPTCTEXT...

6.2CVSS7AI score0.00372EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/02/24 1:52 a.m.•21 views

EUVD-2026-7415

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted profile contain invalid IPTC data may cause an infinite loop when writing it with IPTCTEXT. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

7.5CVSS6.7AI score0.00372EPSS
SaveExploits0References1
Rows per page
Query Builder