PT-2020-22013

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of Use-of-uninitialized-value. The crash occurs in the ares parse caa reply function, as indicated by a report from...

EulerOS 2.0 SP3 : ImageMagick (EulerOS-SA-2020-2090)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.CVE-2018-10805 - ImageMagick version 7.0.7-28...

imagemagick:encoder_xcf_fuzzer: Use-of-uninitialized-value in PerceptibleReciprocal

Detailed Report: https://oss-fuzz.com/testcase?key=4685676858310656 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderxcffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: PerceptibleReciprocal...

c-ares:ares_parse_reply_fuzzer: Use-of-uninitialized-value in ares_parse_caa_reply

Project: https://github.com/c-ares/c-ares.git Detailed Report: https://oss-fuzz.com/testcase?key=5149417215361024 Project: c-ares Fuzzing Engine: libFuzzer Fuzz Target: aresparsereplyfuzzer Job Type: libfuzzermsanc-ares Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

OSV-2020-1854 Use-of-uninitialized-value in UpdateDecStatNoFreezingInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25970 Crash type: Use-of-uninitialized-value Crash state: UpdateDecStatNoFreezingInfo UpdateDecStat WelsDec::DecodeFrameConstruction...

PT-2020-22009

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: UpdateDecStatNoFreezingInfo,...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::t1_part1::T1Part1::postDecode

Detailed Report: https://oss-fuzz.com/testcase?key=4787678997118976 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: grk::t1part1::T1Part1::postDecode...

openh264:decoder_fuzzer: Use-of-uninitialized-value in UpdateDecStatNoFreezingInfo

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5186538382819328 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzermsanopenh264 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

OSV-2020-1849 Use-of-uninitialized-value in RDKit::SubstanceGroup::getBondType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25906 Crash type: Use-of-uninitialized-value Crash state: RDKit::SubstanceGroup::getBondType RDKit::SubstanceGroup::addCState RDKit::SGroupParsing::ParseSGroupV2000SBVLine...

PT-2020-22003

Name of the Vulnerable Software and Affected Versions RDKit affected versions not specified Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the RDKit::SubstanceGroup::getBondType function, which is called by...

rdkit:mol_data_stream_to_mol_fuzzer: Use-of-uninitialized-value in RDKit::SubstanceGroup::getBondType

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5413025698545664 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

OSV-2020-1818 Use-of-uninitialized-value in grk::TileProcessor::prepare_sod_decoding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25798 Crash type: Use-of-uninitialized-value Crash state: grk::TileProcessor::preparesoddecoding grk::CodeStream::parsemarkers grk::CodeStream::decompresstiles...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::TileProcessor::prepare_sod_decoding

Detailed Report: https://oss-fuzz.com/testcase?key=5154931768819712 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: grk::TileProcessor::preparesoddecoding...

OSV-2020-1787 Use-of-uninitialized-value in zend_generator_search_multi_children_node

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25678 Crash type: Use-of-uninitialized-value Crash state: zendgeneratorsearchmultichildrennode zendgeneratoraddchild zendgeneratoryieldfrom...

OSV-2020-1784 Use-of-uninitialized-value in put_unweighted_pred_16_fallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25707 Crash type: Use-of-uninitialized-value Crash state: putunweightedpred16fallback accelerationfunctions::putunweightedpred generateinterpredictionsamples...

PT-2020-21972

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of "Use-of-uninitialized-value". The crash state involves several functions: zend generator search multi children node...

libsndfile:sndfile_fuzzer: Use-of-uninitialized-value in dwvw_decode_load_bits

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=6483024919920640 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilefuzzer Job Type: libfuzzermsanlibsndfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

OSV-2020-1755 Use-of-uninitialized-value in void intra_prediction_angular<unsigned char>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25650 Crash type: Use-of-uninitialized-value Crash state: void intrapredictionangular void decodeintrapredictioninternal decodeintraprediction...

pcapplusplus:FuzzTarget: Use-of-uninitialized-value in pcpp::HttpResponseFirstLine::validateStatusCode

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4829420752470016 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

OSV-2020-1748 Use-of-uninitialized-value in transform_4x4_luma_add_8_fallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25619 Crash type: Use-of-uninitialized-value Crash state: transform4x4lumaadd8fallback void accelerationfunctions::transform4x4dstadd void transformcoefficients...