PT-2022-3768 · Qemu +4 · Qemu +4

Name of the Vulnerable Software and Affected Versions: QEMU versions prior to 7.0.0 Description: The issue in QEMU's softmmu/physmem.c file can lead to an uninitialized read on the translate fail path, resulting in an io readx or io writex crash. A third party notes that this might not be...

Uninitialized read in Nokogiri gem

In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character...

GHSA-4HM9-844J-JMXP Uninitialized read in Nokogiri gem

In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character...

DEBIAN-CVE-2022-20008

In mmcblkreadsingle of block.c, there is a possible way to read kernel heap memory due to uninitialized data. This could lead to local information disclosure if reading from an SD card that triggers errors, with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-21966

An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-21966

An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-21966

The TI CC3200 SimpleLink Solution NWP 2.9.0.0 HTTP Server component exposes /ping.html to unauthenticated POST requests. A POST with parameters __SL_P_T.A/B/C can trigger an uninitialized read, causing information disclosure. TALOS-2021-1393 documents the root cause as CWE-457 (Use of Uninitializ...

CVE-2021-21966: Use of Uninitialized Variable

An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this vulnerability...

PT-2022-9220

Name of the Vulnerable Software and Affected Versions Texas Instruments CC3200 SimpleLink Solution NWP version 2.9.0.0 Description An information disclosure issue exists in the HTTP Server /ping.html functionality. A specially-crafted HTTP request can lead to an uninitialized read. An attacker ca...

wolfmqtt:wolfmqtt-fuzzer: Crash in MqttDecode_Props

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=5112634807025664 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzermsanwolfmqtt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x720000011008...

libyang:lyd_parse_mem_json: Crash in ly_ctx_get_module_by_iter

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=6155614127521792 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lydparsememjson Job Type: libfuzzermsanlibyang Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000002710 Crash...

libyal:libfsext_file_entry_fuzzer: Crash in libfsext_directory_entry_read_data

Detailed Report: https://oss-fuzz.com/testcase?key=4745131891752960 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfsextfileentryfuzzer Job Type: libfuzzermsanlibyal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x70b000010113 Crash State: libfsextdirectoryentryreaddata...

wasm3:fuzzer: Crash in NumFreeLines

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=6260060012544000 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanwasm3 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000000fccd Crash State:...

suricata:fuzz_applayerparserparse_smtp: Crash in strtoul

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5688150086254592 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzapplayerparserparsesmtp Job Type: libfuzzermsansuricata Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

unicorn:fuzz_emu_arm_thumb: Crash in helper_uc_tracecode

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=4839659132944384 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarmthumb Job Type: libfuzzermsanunicorn Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x71cac10023...

CentOS 8 : php:7.2 (CESA-2020:1624)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1624 advisory. - php: Buffer over-read in PHAR reading functions CVE-2018-20783 - php: Heap buffer overflow in function exifprocessIFDTAG CVE-2019-11034 - php: Heap...

selinux:secilc-fuzzer: Crash in cil_copy_macro

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=5077351297843200 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: secilc-fuzzer Job Type: libfuzzermsanselinux Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000030687475...

uwebsockets:Http: Crash in decltype

Detailed Report: https://oss-fuzz.com/testcase?key=4787986289655808 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: Http Job Type: libfuzzermsanuwebsockets Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x716000010000 Crash State: decltype...

mupdf:pdf_fuzzer: Crash in fz_read

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5421070162853888 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffff Crash State:...

openh264:decoder_fuzzer: Crash in WelsCommon::WelsMalloc

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=6235750636716032 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzermsanopenh264 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f4e4a4eb364 Crash...