CVE-2020-6162

An issue was discovered in Bftpd 5.3. Under certain circumstances, an out-of-bounds read is triggered due to an uninitialized value. The daemon crashes at startup in the hidegroupsinit function in dirlist.c...

Out-of-bounds

An issue was discovered in Bftpd 5.3. Under certain circumstances, an out-of-bounds read is triggered due to an uninitialized value. The daemon crashes at startup in the hidegroupsinit function in dirlist.c...

imagemagick:ping_mvg_fuzzer: Use-of-uninitialized-value in FxEvaluateSubexpression

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5139979642863616 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

wavpack:fuzzer: Use-of-uninitialized-value in decimate_dsd_run

Project: https://github.com/dbry/WavPack.git Detailed Report: https://oss-fuzz.com/testcase?key=5103688150679552 Project: wavpack Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanwavpack Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

wavpack:fuzzer: Use-of-uninitialized-value in decimate_dsd_run

Project: https://github.com/dbry/WavPack.git Detailed Report: https://oss-fuzz.com/testcase?key=5723043372728320 Project: wavpack Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanwavpack Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

skia:api_raster_n32_canvas: Use-of-uninitialized-value in SkMinScalar

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5690691959390208 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: apirastern32canvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

openvswitch:odp_target: Use-of-uninitialized-value in nl_attr_is_valid

Project: https://github.com/openvswitch/ovs.git Detailed Report: https://oss-fuzz.com/testcase?key=5135188606844928 Project: openvswitch Fuzzing Engine: libFuzzer Fuzz Target: odptarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in slice_segment_header::read

Detailed Report: https://oss-fuzz.com/testcase?key=6453782464692224 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: slicesegmentheader::read...

Apache Httpd < 2.4.42 : mod_proxy_ftp use of uninitialized value

in Apache HTTP Server versions 2.4.0 to 2.4.41, modproxyftp use of uninitialized value with malicious FTP backend...

imagemagick:encoder_gif_fuzzer: Use-of-uninitialized-value in cmsMLUgetASCII

Detailed Report: https://oss-fuzz.com/testcase?key=5757752983158784 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodergiffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cmsMLUgetASCII...

php:php-fuzz-mbstring: Use-of-uninitialized-value in tune_look_behind

Detailed Report: https://oss-fuzz.com/testcase?key=5689949945069568 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-mbstring Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: tunelookbehind tuneanchor tunetree Sanitizer:...

skia:api_raster_n32_canvas: Use-of-uninitialized-value in SkMinScalar

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=6286834367987712 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: apirastern32canvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

php:php-fuzz-exif: Use-of-uninitialized-value in exif_process_TIFF_in_JPEG

Detailed Report: https://oss-fuzz.com/testcase?key=5631203063627776 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-exif Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: exifprocessTIFFinJPEG exifscanJPEGheader...

xerces-c:parse_target: Use-of-uninitialized-value in xercesc_3_2::XMLString::compareNString

Detailed Report: https://oss-fuzz.com/testcase?key=5643481133613056 Project: xerces-c Fuzzing Engine: libFuzzer Fuzz Target: parsetarget Job Type: libfuzzermsanxerces-c Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: xercesc32::XMLString::compareNString...

icu:collator_rulebased_fuzzer: Use-of-uninitialized-value in isMatchAtCPBoundary

Project: https://github.com/unicode-org/icu.git Detailed Report: https://oss-fuzz.com/testcase?key=5638982021152768 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: collatorrulebasedfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

zstd:dictionary_loader: Use-of-uninitialized-value in ZSTD_loadCEntropy

Project: https://github.com/facebook/zstd.git Detailed Report: https://oss-fuzz.com/testcase?key=5685433724043264 Project: zstd Fuzzing Engine: libFuzzer Fuzz Target: dictionaryloader Job Type: libfuzzermsanzstd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

kimageformats:kimgio_xcf_fuzzer: Use-of-uninitialized-value in BLEND_SOURCE_OVER_ARGB32_WITH_CONST_ALPHA_AVX2

Detailed Report: https://oss-fuzz.com/testcase?key=5666881846902784 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioxcffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

cryptofuzz:cryptofuzz-openssl-noasm: Use-of-uninitialized-value in EVP_DecryptUpdate

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5736062923571200 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-val...

yara:rules_fuzzer: Use-of-uninitialized-value in yr_arena_destroy

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=5681595617116160 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: rulesfuzzer Job Type: libfuzzermsanyara Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in derive_collocated_motion_vectors

Detailed Report: https://oss-fuzz.com/testcase?key=5765356846579712 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: derivecollocatedmotionvectors...