CVE-2021-21966: Use of Uninitialized Variable

An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this vulnerability...

PT-2022-9220

Name of the Vulnerable Software and Affected Versions Texas Instruments CC3200 SimpleLink Solution NWP version 2.9.0.0 Description An information disclosure issue exists in the HTTP Server /ping.html functionality. A specially-crafted HTTP request can lead to an uninitialized read. An attacker ca...

wolfmqtt:wolfmqtt-fuzzer: Crash in MqttDecode_Props

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=5112634807025664 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzermsanwolfmqtt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x720000011008...

libyang:lyd_parse_mem_json: Crash in ly_ctx_get_module_by_iter

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=6155614127521792 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lydparsememjson Job Type: libfuzzermsanlibyang Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000002710 Crash...

libyal:libfsext_file_entry_fuzzer: Crash in libfsext_directory_entry_read_data

Detailed Report: https://oss-fuzz.com/testcase?key=4745131891752960 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfsextfileentryfuzzer Job Type: libfuzzermsanlibyal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x70b000010113 Crash State: libfsextdirectoryentryreaddata...

wasm3:fuzzer: Crash in NumFreeLines

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=6260060012544000 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanwasm3 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000000fccd Crash State:...

suricata:fuzz_applayerparserparse_smtp: Crash in strtoul

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5688150086254592 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzapplayerparserparsesmtp Job Type: libfuzzermsansuricata Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

unicorn:fuzz_emu_arm_thumb: Crash in helper_uc_tracecode

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=4839659132944384 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarmthumb Job Type: libfuzzermsanunicorn Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x71cac10023...

CentOS 8 : php:7.2 (CESA-2020:1624)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1624 advisory. - php: Buffer over-read in PHAR reading functions CVE-2018-20783 - php: Heap buffer overflow in function exifprocessIFDTAG CVE-2019-11034 - php: Heap...

selinux:secilc-fuzzer: Crash in cil_copy_macro

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=5077351297843200 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: secilc-fuzzer Job Type: libfuzzermsanselinux Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000030687475...

uwebsockets:Http: Crash in decltype

Detailed Report: https://oss-fuzz.com/testcase?key=4787986289655808 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: Http Job Type: libfuzzermsanuwebsockets Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x716000010000 Crash State: decltype...

mupdf:pdf_fuzzer: Crash in fz_read

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5421070162853888 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffff Crash State:...

openh264:decoder_fuzzer: Crash in WelsCommon::WelsMalloc

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=6235750636716032 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzermsanopenh264 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f4e4a4eb364 Crash...

CVE-2020-6107

An exploitable information disclosure vulnerability exists in the devread functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause an uninitialized read resulting in an information disclosure. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2020-6107

An exploitable information disclosure vulnerability exists in the devread functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause an uninitialized read resulting in an information disclosure. An attacker can provide a malicious file to trigger this vulnerability...

DEBIAN-CVE-2020-6107

An exploitable information disclosure vulnerability exists in the devread functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause an uninitialized read resulting in an information disclosure. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2020-6107

An exploitable information disclosure vulnerability exists in the devread functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause an uninitialized read resulting in an information disclosure. An attacker can provide a malicious file to trigger this vulnerability...

UBUNTU-CVE-2020-6107

An exploitable information disclosure vulnerability exists in the devread functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause an uninitialized read resulting in an information disclosure. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2020-6107

An exploitable information disclosure vulnerability exists in the devread functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause an uninitialized read resulting in an information disclosure. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2020-6107

CVE-2020-6107 affects F2fs-tools F2fs.Fsck 1.13. The vulnerability is in the dev_read functionality of F2fs.Fsck, where a specially crafted f2fs filesystem can trigger an uninitialized read, leading to information disclosure. Attacker-controlled input (a malicious file) is sufficient to trigger t...