OSV-2021-1108 Use-of-uninitialized-value in init_main_qtable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36913 Crash type: Use-of-uninitialized-value Crash state: initmainqtable LibRaw::fujidecodestrip LibRaw::fujidecodeloop...

UVI-2021-1001469 net: fix uninit-value in caif_seqpkt_sendmsg

net: fix uninit-value in caifseqpktsendmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.277 by commit...

OSV-2021-1074 Use-of-uninitialized-value in SkBaseDevice::save

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36647 Crash type: Use-of-uninitialized-value Crash state: SkBaseDevice::save SkCanvas::internalSave SkCanvas::internalSaveLayer...

OSV-2021-1052 Use-of-uninitialized-value in jxl::N_AVX2::UpsampleRect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36497 Crash type: Use-of-uninitialized-value Crash state: jxl::NAVX2::UpsampleRect jxl::Upsampler::UpsampleRect jxl::FinalizeImageRect...

OSV-2021-1011 Use-of-uninitialized-value in jxl::N_AVX2::AddNoise

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36158 Crash type: Use-of-uninitialized-value Crash state: jxl::NAVX2::AddNoise jxl::FinalizeImageRect jxl::ThreadPool::RunCallStatejxl::FinalizeFrameDecoding...

PT-2024-11298 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an uninitialized value in the caif seqpkt sendmsg function, which is defined in sys sendmsg. When nr segs equals zero in iovec from user, the object msg-msg...

OSV-2021-948 Use-of-uninitialized-value in residual_coding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35950 Crash type: Use-of-uninitialized-value Crash state: residualcoding readtransformunit readtransformtree...

OSV-2021-916 Use-of-uninitialized-value in jxl::ModularFrameDecoder::DecodeAcMetadata

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35778 Crash type: Use-of-uninitialized-value Crash state: jxl::ModularFrameDecoder::DecodeAcMetadata jxl::FrameDecoder::ProcessDCGroup jxl::ThreadPool::RunCallStatejxl::Status...

OSV-2021-858 Use-of-uninitialized-value in jxl::N_SCALAR::Epf0Row

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35234 Crash type: Use-of-uninitialized-value Crash state: jxl::NSCALAR::Epf0Row jxl::FilterPipeline::ApplyFiltersRow jxl::FinalizeImageRect...

CentOS: Security Advisory for qt5-qtimageformats (CESA-2021:2328)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS 7 : qt5-qtimageformats (RHSA-2021:2328)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2328 advisory. - A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16. CVE-2018-25011 - A use of uninitialized value was found in...

RHEL 7 : qt5-qtimageformats (RHSA-2021:2328)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2328 advisory. The Qt Image Formats in an add-on module for the core Qt Gui library that provides support for additional image formats including MNG, TGA,...

Important: Red Hat Security Advisory: qt5-qtimageformats security update

An update for qt5-qtimageformats is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().

...

CVE-2018-25014

CVE-2018-25014 affects the libwebp library: a use of an uninitialized value is present in ReadSymbol() in versions before 1.0.1. The issue is documented across multiple advisories (e.g., ALAS2/AlmaLinux notices) and is associated with libwebp data integrity/confidentiality/availability risks. A f...

CVE-2018-25014

A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol...

OSV-2021-757 Use-of-uninitialized-value in nn_check_initialized

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34156 Crash type: Use-of-uninitialized-value Crash state: nncheckinitialized nnzero ecgdsasignraw...

OSV-2021-735 Use-of-uninitialized-value in decode_CABAC_FL_bypass

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34047 Crash type: Use-of-uninitialized-value Crash state: decodeCABACFLbypass decodecoeffabslevelremaining residualcoding...

PT-2021-21280 · Signalwire +1 · Freeswitch +1

Name of the Vulnerable Software and Affected Versions: SignalWire freeswitch versions prior to 1.10.6 Description: An issue was discovered in the function sofia handle sip i notify in sofia.c, which may allow attackers to view sensitive information due to an uninitialized value. Recommendations:...

OSV-2021-615 Use-of-uninitialized-value in DES_set_key_unchecked

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33023 Crash type: Use-of-uninitialized-value Crash state: DESsetkeyunchecked osslcipherhwtdesede3initkey tdesinit...