OSV-2024-450 Use-of-uninitialized-value in ink_filepath_merge

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68468 Crash type: Use-of-uninitialized-value Crash state: inkfilepathmerge layoutrelative Layout::Layout...

PT-2024-40769

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the YAML parsing process, specifically in the...

PT-2024-40771 · Unknown · Xpackdynamictable

Name of the Vulnerable Software and Affected Versions: XpackDynamicTable affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the XpackDynamicTable:: make space function, which is called by the...

PT-2024-40770 · Git +1 · Trafficserver

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of "Use-of-uninitialized-value". The crash state includes functions such as ink filepath merge, layout relative, and...

PT-2024-40772 · Git +1 · Pjsip

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of "Use-of-uninitialized-value" as reported by OSS-Fuzz. The crash occurs in the encode base64 differential function...

PT-2024-6599

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an uninitialized value in the BPF CORE READ BITFIELD macro, defined in bpf core read.h. GCC warns that the val variable may be used uninitialized. The...

pcapplusplus:FuzzTargetNg: Use-of-uninitialized-value in std::__1::ostreambuf_iterator<char, std::__1::char_traits<char>> std::__1::__pad

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5158291033358336 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTargetNg Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

poppler:qt_textbox_fuzzer: Use-of-uninitialized-value in XRef::getCatalog

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5131386351583232 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...

poppler:doc_fuzzer: Use-of-uninitialized-value in Object::free

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=4655342846803968 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...

lzma:7z_fuzzer: Use-of-uninitialized-value in CrcUpdateT8

Detailed Report: https://oss-fuzz.com/testcase?key=5172662262366208 Project: lzma Fuzzing Engine: libFuzzer Fuzz Target: 7zfuzzer Job Type: libfuzzermsanlzma Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: CrcUpdateT8 CrcCalc SzArExExtract Sanitizer: memory...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void apply_sao_internal<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=5123853960413184 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void applysaointernal...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in decoder_context::construct_reference_picture_lists

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4937788024750080 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

imagemagick:encoder_jpc_fuzzer: Use-of-uninitialized-value in opj_j2k_decode_tiles

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6279718377684992 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderjpcfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

graphicsmagick:coder_BIE_fuzzer: Use-of-uninitialized-value in ImportViewPixelArea

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5815016505802752 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderBIEfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

openjpeg:opj_decompress_fuzzer_J2K: Use-of-uninitialized-value in opj_j2k_decode_tiles

Project: https://github.com/uclouvain/openjpeg.git https://github.com/uclouvain/openjpeg-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5438904854446080 Project: openjpeg Fuzzing Engine: libFuzzer Fuzz Target: opjdecompressfuzzerJ2K Job Type: libfuzzermsanopenjpeg Platform Id: linux...

xz:fuzz_encode_stream: Use-of-uninitialized-value in crc64_arch_optimized

Project: https://github.com/tukaani-project/xz.git Detailed Report: https://oss-fuzz.com/testcase?key=6606873663963136 Project: xz Fuzzing Engine: libFuzzer Fuzz Target: fuzzencodestream Job Type: libfuzzermsanxz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State...

imagemagick:encoder_mng_fuzzer: Use-of-uninitialized-value in CompositeImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5954971840348160 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

PT-2024-27197

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential uninit-value access in the ip6 make skb function. To avoid a race condition, the code now checks FLOWI FLAG KNOWN NH on fl6-flowi6 flags instead of...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in Op_YCbCr_to_RGB<unsigned char>::convert_colorspace

Detailed Report: https://oss-fuzz.com/testcase?key=5859969999110144 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: OpYCbCrtoRGB::convertcolorspac...

graphicsmagick:coder_DCM_fuzzer: Use-of-uninitialized-value in ReadJPEGImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=4704540631826432 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderDCMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...