file: Use-of-uninitialized-value in match

Detailed report: https://oss-fuzz.com/testcase?key=6210431494389760 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzermsanfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: match filesoftmagic...

botan: Use-of-uninitialized-value in Botan::Charset::is_space

Project: https://github.com/randombit/botan.git Detailed report: https://oss-fuzz.com/testcase?key=6157314526543872 Project: botan Fuzzer: libFuzzerbotancert Fuzz target binary: cert Job Type: libfuzzermsanbotan Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

file: Use-of-uninitialized-value in mcopy

Detailed report: https://oss-fuzz.com/testcase?key=6069128647409664 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzermsanfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: mcopy mget match Sanitizer: memory...

harfbuzz: Use-of-uninitialized-value in OT::RangeRecord::cmp

Detailed report: https://oss-fuzz.com/testcase?key=5924299061854208 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: OT::RangeRecord::cmp /mnt/...

CVE-2016-10251

Integer overflow in the jpcpinextcprl function in jpct2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value...

Integer overflow

Integer overflow in the jpcpinextcprl function in jpct2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value...

CVE-2016-10251

Integer overflow in the jpcpinextcprl function in jpct2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value...

CVE-2016-10251

Integer overflow in the jpcpinextcprl function in jpct2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value...

CVE-2016-10251

Integer overflow in the jpcpinextcprl function in jpct2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value...

CVE-2016-10251

CVE-2016-10251 : JasPer 1.900.x before 1.900.20 contains an integer overflow in jpc_pi_nextcprl (jpc_t2cod.c). Crafting a JPEG 2000 file can trigger use of an uninitialized value, with unspecified impact. Affected software versions: JasPer up to but not including 1.900.20. Remediation: upgrade to...

harfbuzz: Use-of-uninitialized-value in OT::RangeRecord::cmp

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=6595199411159040 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

harfbuzz: Use-of-uninitialized-value in int OT::SortedArrayOf<OT::GlyphID, OT::IntType<unsigned short, 2u> >::bsearch<un

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5294584596791296 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

harfbuzz: Use-of-uninitialized-value in OT::RangeRecord::cmp

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=4687441845813248 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

json: Use-of-uninitialized-value in __gxx_personality_v0

Project: https://github.com/nlohmann/json.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5830738947604480 Project: json Fuzzer: libFuzzerjsonparseaflfuzzer Fuzz target binary: parseaflfuzzer Job Type: libfuzzermsanjson Platform Id: linux Crash Type:...

arduinojson: Use-of-uninitialized-value in ArduinoJson::Internals::CharPointerTraits::equals

Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4631060662976512 Project: arduinojson Fuzzer: libFuzzerarduinojsonjsonfuzzer Fuzz target binary: jsonfuzzer Job Type: libfuzzermsanarduinojson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash Stat...

json: Use-of-uninitialized-value in nlohmann::basic_json<std::__1::map, std::__1::vector, std::__1::basic_string<cha

Project: https://github.com/nlohmann/json.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6051806467588096 Project: json Fuzzer: libFuzzerjsonfuzzer-parsecbor Fuzz target binary: fuzzer-parsecbor Job Type: libfuzzermsanjson Platform Id: linux Crash Type:...

json: Use-of-uninitialized-value in std::__1::char_traits<char>::compare

Project: https://github.com/nlohmann/json.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6240782075822080 Project: json Fuzzer: libFuzzerjsonfuzzer-parsemsgpack Fuzz target binary: fuzzer-parsemsgpack Job Type: libfuzzermsanjson Platform Id: linux Crash Type:...

CVE-2016-8820

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape where a check on a function return value is missing, potentially allowing an uninitialized value to be used as the source of a strcpy call, leading to denial of...

expat: Use-of-uninitialized-value in _start

Project: https://github.com/libexpat/libexpat.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4717026396340224 Project: expat Fuzzer: libFuzzerexpatparsefuzzer Fuzz target binary: expatparsefuzzer Job Type: libfuzzermsanexpat Platform Id: linux Crash Type:...

SUSE-SU-2016:1839-1 Security update for obs-service-source_validator

This update for obs-service-sourcevalidator to version 0.6+git20160531.fbfe336 fixes one security issue. This security issue was fixed: - CVE-2016-4007: harden source services against code/parameter injection bsc967265 This non-security issue was fixed: - bsc967610: Several occurrences of...