CVE-2023-52528 net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg

In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in smsc75xxreadreg syzbot reported the following uninit-value access issue: ===================================================== BUG: KMSAN: uninit-value in smsc75xxwaitready...

libaom:av1_dec_fuzzer: Use-of-uninitialized-value in od_ec_decode_bool_q15

Detailed Report: https://oss-fuzz.com/testcase?key=5446697209626624 Project: libaom Fuzzing Engine: libFuzzer Fuzz Target: av1decfuzzer Job Type: libfuzzermsanlibaom Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: odecdecodeboolq15 av1readcoeffstxb...

poppler:qt_annot_fuzzer: Use-of-uninitialized-value in aesEncryptBlock

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5038228727988224 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void transform_idct_add<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=4545594032979968 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void transformidctadd...

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::canon_load_raw

Detailed Report: https://oss-fuzz.com/testcase?key=5072513707081728 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::canonloadraw...

pcre2:pcre2_fuzzer_4l: Use-of-uninitialized-value in do_search_mark

Project: svn://vcs.exim.org/pcre2/code/trunk https://github.com/PCRE2Project/pcre2.git Detailed Report: https://oss-fuzz.com/testcase?key=5980008000585728 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer4l Job Type: libfuzzermsanpcre2 Platform Id: linux Crash Type:...

pcre2:pcre2_fuzzer: Use-of-uninitialized-value in fast_forward_first_n_chars

Project: svn://vcs.exim.org/pcre2/code/trunk https://github.com/PCRE2Project/pcre2.git Detailed Report: https://oss-fuzz.com/testcase?key=4593633133133824 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer Job Type: libfuzzermsanpcre2 Platform Id: linux Crash Type:...

libavif:[email protected]: Use-of-uninitialized-value in SharpYuvGammaToLinear

Project: https://github.com/AOMediaCodec/libavif.git Detailed Report: https://oss-fuzz.com/testcase?key=6443913265086464 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzermsanlibavif Platform Id: linux Crash Type:...

libavif:[email protected]: Use-of-uninitialized-value in avifImageRGBToYUV

Project: https://github.com/AOMediaCodec/libavif.git Detailed Report: https://oss-fuzz.com/testcase?key=5160955631697920 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzermsanlibavif Platform Id: linux Crash Type:...

libavif:[email protected]: Use-of-uninitialized-value in avifImageRGBToYUV

Project: https://github.com/AOMediaCodec/libavif.git Detailed Report: https://oss-fuzz.com/testcase?key=4927644015591424 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzermsanlibavif Platform Id: linux Crash Type:...

libavif:[email protected]: Use-of-uninitialized-value in avif::testutil::ComparePartialYuva

Project: https://github.com/AOMediaCodec/libavif.git Detailed Report: https://oss-fuzz.com/testcase?key=4680467104202752 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzermsanlibavif Platform Id: linux Crash Type:...

wolfssl:cryptofuzz-normal-math: Use-of-uninitialized-value in sp_radix_size

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6599903289606144 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-normal-math Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

wolfssl:cryptofuzz-heapmath: Use-of-uninitialized-value in mp_read_unsigned_bin

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4515959823990784 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-heapmath Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

cryptofuzz:cryptofuzz-boringssl-noasm: Use-of-uninitialized-value in cryptofuzz::module::wolfCrypt_bignum::Bignum::~Bignum

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=6447297799979008 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type:...

cryptofuzz:cryptofuzz-boringssl-noasm: Use-of-uninitialized-value in sp_radix_size

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=6016941506494464 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type:...

binutils:fuzz_objdump_safe: Use-of-uninitialized-value in bfd_is_section_compressed_info

Detailed Report: https://oss-fuzz.com/testcase?key=6667563805245440 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzobjdumpsafe Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: bfdissectioncompressedinfo...

CentOS 8 : firefox (CESA-2023:3220)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2023:3220 advisory. - In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and...

CentOS 8 : thunderbird (CESA-2023:3221)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2023:3221 advisory. - In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and...

zstd:dictionary_stream_round_trip: Use-of-uninitialized-value in ZSTD_rawLiteralsCost

Project: https://github.com/facebook/zstd.git Detailed Report: https://oss-fuzz.com/testcase?key=5131069967892480 Project: zstd Fuzzing Engine: libFuzzer Fuzz Target: dictionarystreamroundtrip Job Type: libfuzzermsanzstd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...

imagemagick:crop_fuzzer: Use-of-uninitialized-value in LibRaw::copy_bayer

Detailed Report: https://oss-fuzz.com/testcase?key=4747134947622912 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::copybayer LibRaw::raw2imageex...