CentOS Linux 8 [TuxCare] Security Update: libwebp / libwebp-devel / libwebp-java / libwebp-tools Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1776421961)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1776421961 advisory. - A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes. CVE-2018-25013 - A use of uninitializ...

open5gs:ipfw_rule_fuzz: Use-of-uninitialized-value in ogs_log_set_mask_level

Project: https://github.com/open5gs/open5gs.git Detailed Report: https://oss-fuzz.com/testcase?key=5982628881432576 Project: open5gs Fuzzing Engine: libFuzzer Fuzz Target: ipfwrulefuzz Job Type: libfuzzermsanopen5gs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

php:php-fuzz-unserialize: Use-of-uninitialized-value in zim_Time_Duration___unserialize

Detailed Report: https://oss-fuzz.com/testcase?key=6431772334948352 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-unserialize Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: zimTimeDurationunserialize zendcallfunction...

grok:grk_decompress_mercury_fuzzer: Use-of-uninitialized-value in bool grk::WaveletReverse::partial_tile<int, int, 1u, 4u, grk::Partial53<int, int

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5849385926459392 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressmercuryfuzzer Job Type: libfuzzermsangrok...

OSV-2026-1220 Use-of-uninitialized-value in str_escape

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=554268877 Crash type: Use-of-uninitialized-value Crash state: strescape mrbvmexec yieldwithattr...

PT-2026-89255

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=554268877 Crash type: Use-of-uninitialized-value Crash state: str escape mrb vm exec yield with attr...

graphicsmagick:coder_HEIF_fuzzer: Use-of-uninitialized-value in parse_sps_for_avcC_configuration

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6268196932616192 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderHEIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

llvm:llvm-isel-fuzzer--arm-O2: Use-of-uninitialized-value in createSlotTracker

Detailed Report: https://oss-fuzz.com/testcase?key=6013369242157056 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-isel-fuzzer--arm-O2 Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: createSlotTracker...

PT-2026-76220

ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c...

llvm:llvm-opt-fuzzer--x86_64-irce: Use-of-uninitialized-value in llvm::ScalarEvolution::createSCEV

Detailed Report: https://oss-fuzz.com/testcase?key=6058550435315712 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-opt-fuzzer--x8664-irce Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: llvm::ScalarEvolution::createSCEV...

open62541:fuzz_config_json: Use-of-uninitialized-value in PubsubConfigurationField_parseJson

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=4679867199979520 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzconfigjson Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

OSV-2026-1032 Use-of-uninitialized-value in Assimp::PbrtExporter::WriteTextures

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531040219 Crash type: Use-of-uninitialized-value Crash state: Assimp::PbrtExporter::WriteTextures Assimp::PbrtExporter::WriteWorldDefinition Assimp::PbrtExporter::PbrtExporter...

OSV-2026-1030 Use-of-uninitialized-value in Assimp::glTFExporter::GetTexSampler

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531097475 Crash type: Use-of-uninitialized-value Crash state: Assimp::glTFExporter::GetTexSampler Assimp::glTFExporter::GetMatColorOrTex Assimp::glTFExporter::ExportMaterials...

PT-2026-105762

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531097475 Crash type: Use-of-uninitialized-value Crash state: Assimp::glTFExporter::GetTexSampler Assimp::glTFExporter::GetMatColorOrTex Assimp::glTFExporter::ExportMaterials...

PT-2026-105763

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=531040219 Crash type: Use-of-uninitialized-value Crash state: Assimp::PbrtExporter::WriteTextures Assimp::PbrtExporter::WriteWorldDefinition Assimp::PbrtExporter::PbrtExporter...

PT-2026-60256

In affected versions of this crate, let cxx string! is not exception safe. After creating the StackString, if match $value panics, the content of StackString is not yet initialized, while the drop implementation of StackString unconditionally deinitializes the content, leading to use of...

assimp:assimp_roundtrip_fuzzer: Use-of-uninitialized-value in Assimp::PbrtExporter::WriteTextures

Detailed Report: https://oss-fuzz.com/testcase?key=4711195983282176 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimproundtripfuzzer Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Assimp::PbrtExporter::WriteTextures...

assimp:assimp_roundtrip_fuzzer: Use-of-uninitialized-value in Assimp::glTFExporter::GetTexSampler

Detailed Report: https://oss-fuzz.com/testcase?key=4607674386546688 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimproundtripfuzzer Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Assimp::glTFExporter::GetTexSampler...

libraw:libraw_nef_fuzzer: Use-of-uninitialized-value in LibRaw::canon_600_auto_wb

Detailed Report: https://oss-fuzz.com/testcase?key=4579897524420608 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawneffuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::canon600autowb...

gnutls:gnutls_x509_parser_fuzzer: Use-of-uninitialized-value in print_scts

Detailed Report: https://oss-fuzz.com/testcase?key=6278986506764288 Project: gnutls Fuzzing Engine: libFuzzer Fuzz Target: gnutlsx509parserfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: printscts printextensions...