OSV-2020-1598 Use-of-uninitialized-value in longest_match

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24804 Crash type: Use-of-uninitialized-value Crash state: longestmatch deflatefast deflate...

PT-2020-21918

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of "Use-of-uninitialized-value" as reported by OSS-Fuzz. The crash state involves the fuzzing::memory::memory test msa...

PT-2020-21914

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the longest match, deflate fast, and deflate functions. No...

PT-2020-21915

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description The issue is related to a crash type of Use-of-uninitialized-value. The crash state includes functions such as slide hash, fill window, and deflate fast. Recommendations At the moment,...

uwebsockets:PerMessageDeflate: Use-of-uninitialized-value in slide_hash

Detailed Report: https://oss-fuzz.com/testcase?key=5629572998234112 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: PerMessageDeflate Job Type: libfuzzermsanuwebsockets Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: slidehash fillwindow deflatefa...

OSV-2020-1595 Use-of-uninitialized-value in cryptofuzz::module::Nettle::OpSymmetricDecrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24785 Crash type: Use-of-uninitialized-value Crash state: cryptofuzz::module::Nettle::OpSymmetricDecrypt cryptofuzz::ExecutorBasecryptofuzz::Buffer, cryptofuzz::operation::SymmetricDec cryptofuzz::ExecutorBasecryptofuzz::Buffe...

PT-2020-21912

Name of the Vulnerable Software and Affected Versions Nettle affected versions not specified Description The issue is related to a crash caused by the use of an uninitialized value. It occurs in the cryptofuzz::module::Nettle::OpSymmetricDecrypt function, specifically during symmetric decryption...

uwebsockets:MockedEchoServer: Use-of-uninitialized-value in longest_match

Detailed Report: https://oss-fuzz.com/testcase?key=5370327463624704 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: MockedEchoServer Job Type: libfuzzermsanuwebsockets Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: longestmatch deflatefast deflat...

cryptofuzz:cryptofuzz-boringssl-noasm: Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5726830049624064 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type:...

cryptofuzz:cryptofuzz-openssl-noasm: Use-of-uninitialized-value in cryptofuzz::module::Nettle::OpSymmetricDecrypt

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5699479697883136 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-val...

Information Disclosure

FreeRDP is vulnerable to information disclosure. An out-of-bounds OOB read vulnerability in securityfipsdecrypt in libfreerdp/core/security.c due to an uninitialized value allows an attacker to retrieve confidential information...

graphicsmagick:coder_CRW_fuzzer: Use-of-uninitialized-value in MagickCondSignal

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5676670342922240 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderCRWfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

imagemagick:ping_mvg_fuzzer: Use-of-uninitialized-value in RenderMVGContent

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5729350432063488 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

OSV-2020-1573 Use-of-uninitialized-value in void ArduinoJsonNUMBER_71::Utf8::encodeCodepoint<ArduinoJsonNUMBER_71::StringCop

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24633 Crash type: Use-of-uninitialized-value Crash state: void ArduinoJsonNUMBER71::Utf8::encodeCodepointArduinoJsonNUMBER71::StringCop ArduinoJsonNUMBER71::JsonDeserializerArduinoJsonNUMBER71::BoundedReaderunsig...

PT-2020-21903

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of Use-of-uninitialized-value. The crash state involves functions such as pb encode varint, pb enc varint, and encode...

wabt:wasm2wat_fuzzer: Use-of-uninitialized-value in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Detailed Report: https://oss-fuzz.com/testcase?key=5636605530603520 Project: wabt Fuzzing Engine: libFuzzer Fuzz Target: wasm2watfuzzer Job Type: libfuzzermsanwabt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::basicstring, std::1::allocator,...

OSV-2020-1538 Use-of-uninitialized-value in cmsMLUgetASCII

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19724 Crash type: Use-of-uninitialized-value Crash state: cmsMLUgetASCII cmsGetProfileInfoASCII GetICCProperty...

OSV-2020-1534 Use-of-uninitialized-value in void transform_idct_add<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23918 Crash type: Use-of-uninitialized-value Crash state: void transformidctadd transform8x8add16fallback void accelerationfunctions::transformadd...

OSV-2020-1529 Use-of-uninitialized-value in CorrectPSDAlphaBlend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13836 Crash type: Use-of-uninitialized-value Crash state: CorrectPSDAlphaBlend ReadPSDMergedImage ReadPSDImage...

OSV-2020-1528 Use-of-uninitialized-value in PushColormapIndex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10379 Crash type: Use-of-uninitialized-value Crash state: PushColormapIndex SyncImage WriteOnePNGImage...