CVE-2026-46676

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. From versions 1.4.0 to before 1.4.4, and 1.5.0 to before 1.5.1, an uninitialized value use vulnerability in bacnet-stack's AtomicReadFile record-access ACK encoder allows unauthenticated remote attackers to corrup...

CVE-2026-46676 BACnet Stack: Uninitialized Value Use in AtomicReadFile-ACK Record-Access Encoder Causes Response Corruption and Conditional Information Disclosure

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. From versions 1.4.0 to before 1.4.4, and 1.5.0 to before 1.5.1, an uninitialized value use vulnerability in bacnet-stack's AtomicReadFile record-access ACK encoder allows unauthenticated remote attackers to corrup...

CVE-2026-46676

The BACnet Stack , an open-source C library for embedded systems, contains an uninitialized value use vulnerability in the AtomicReadFile record-access ACK encoder . This flaw affects versions 1.4.0 to before 1.4.4 and 1.5.0 to before 1.5.1 . An unauthenticated remote attacker can send a crafted ...

PT-2026-146040

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. From versions 1.4.0 to before 1.4.4, and 1.5.0 to before 1.5.1, an uninitialized value use vulnerability in bacnet-stack's AtomicReadFile record-access ACK encoder allows unauthenticated remote attackers to corrup...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix uninit-value in the RF discover/activated NTF handlers ncirfdiscoverntfpacket and ncirfintfactivatedntfpacket each parse a notification into an on-stack struct ncirfdiscoverntf / ncirfintfactivatedntf that is not...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftnat: fully initialize newaddr in netmap setup nftnatsetupnetmap builds the mapped address in an on-stack union nfinetaddr. For an IPv4 mapping it writes only the 4-byte .ip member and the loop runs a single 32-bit...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: validate numbered report payloads When hidpgetrawreport waits for a numbered report, hidpprocessdata compares the expected report number with skb-data0. A connected HIDP peer can reply with only a DATA transactio...

CLEANSTART-2024-CR03462 When reading a file, an uninitialized value could have been used as read limit

Security vulnerability affects the firefox-esr package. When reading a file, an uninitialized value could have been used as read limit...

freetype2:type42-render: Use-of-uninitialized-value in FT_Vector_NormLen

Detailed Report: https://oss-fuzz.com/testcase?key=5140655463268352 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: type42-render Job Type: libfuzzermsanfreetype2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: FTVectorNormLen TTRunIns TTHintGlyph...

OSV-2026-1437 Use-of-uninitialized-value in processHandshakeTLSBlock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=576341612 Crash type: Use-of-uninitialized-value Crash state: processHandshakeTLSBlock ndpisearchtlstcpinternal ndpidetectionprocesspacket...

PT-2026-135252

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=576341612 Crash type: Use-of-uninitialized-value Crash state: processHandshakeTLSBlock ndpi search tls tcp internal ndpi detection process packet...

ndpi:fuzz_ndpi_reader_nalloc: Use-of-uninitialized-value in processHandshakeTLSBlock

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5685346470526976 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireadernalloc Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

OSV-2026-1429 Use-of-uninitialized-value in nlohmann::json_abi_v3_12_0::detail::binary_reader<nlohmann::json_abi_v3_12_0::ba

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=575915982 Crash type: Use-of-uninitialized-value Crash state: nlohmann::jsonabiv3120::detail::binaryreadernlohmann::jsonabiv3120::ba nlohmann::jsonabiv3120::detail::binaryreadernlohmann::jsonabiv3120::ba...

PT-2026-134800

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=575915982 Crash type: Use-of-uninitialized-value Crash state: nlohmann::json abi v3 12 0::detail::binary readernlohmann::json abi v3 12 0::ba nlohmann::json abi v3 12 0::detail::binary readernlohmann::json abi v3 12 0::ba...

json:parse_bson_fuzzer: Use-of-uninitialized-value in nlohmann::json_abi_v3_12_0::detail::binary_reader<nlohmann::json_abi_v3_12_0::ba

Project: https://github.com/nlohmann/json.git Detailed Report: https://oss-fuzz.com/testcase?key=5520518678380544 Project: json Fuzzing Engine: libFuzzer Fuzz Target: parsebsonfuzzer Job Type: libfuzzermsanjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

Linux Distros Unpatched Vulnerability : CVE-2026-98438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcpwritedatafin When sending a DATAFIN without data, a...

SUSE CVE-2026-98438

In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcpwritedatafin When sending a DATAFIN without data, and because the DATAFIN occupies 1 octet of the connection-level sequence space 1, it is then required to add a DSS mapping with specific...

DEBIAN-CVE-2026-98438

In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcpwritedatafin When sending a DATAFIN without data, and because the DATAFIN occupies 1 octet of the connection-level sequence space 1, it is then required to add a DSS mapping with specific...

CVE-2026-98438

In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcpwritedatafin When sending a DATAFIN without data, and because the DATAFIN occupies 1 octet of the connection-level sequence space 1, it is then required to add a DSS mapping with specific...

UBUNTU-CVE-2026-98438

In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcpwritedatafin When sending a DATAFIN without data, and because the DATAFIN occupies 1 octet of the connection-level sequence space 1, it is then required to add a DSS mapping with specific...