16209 matches found
The vulnerability of the insert_pin function in the OpenSC smart card library allows a violator to trigger a service failure.
The vulnerability of the insertpin function in the OpenSC smart card library is related to an unvalidated return value. Exploiting this vulnerability allows a remote attacker to cause service failures...
binutils:fuzz_dlltool: Use-of-uninitialized-value in bfd_getl64
Detailed Report: https://oss-fuzz.com/testcase?key=5773375697125376 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdlltool Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: bfdgetl64 alphaecoffswapfilehdrin...
php:php-fuzz-execute: Use-of-uninitialized-value in find_implicit_binds_recursively
Detailed Report: https://oss-fuzz.com/testcase?key=4904950019981312 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: findimplicitbindsrecursively findimplicitbinds...
SUSE CVE-2022-50501
In the Linux kernel, the following vulnerability has been resolved: media: coda: Add check for dcodairamalloc As the codairamalloc may return NULL pointer, it should be better to check the return value in order to avoid NULL poineter dereference, same as the others...
SUSE CVE-2025-39931
In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Set merge to zero early in afalgsendmsg If an error causes afalgsendmsg to abort, ctx-merge may contain a garbage value from the previous loop. This may then trigger a crash on the next entry into afalgsendmsg whe...
OSV-2025-809 Use-of-uninitialized-value in WebPCleanupTransparentArea
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=449246999 Crash type: Use-of-uninitialized-value Crash state: WebPCleanupTransparentArea WebPEncode EncTest...
PT-2025-46089
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=449246999 Crash type: Use-of-uninitialized-value Crash state: WebPCleanupTransparentArea WebPEncode EncTest...
CVE-2023-53569 ext2: Check block size validity during mount
In the Linux kernel, the following vulnerability has been resolved: ext2: Check block size validity during mount Check that log of block size stored in the superblock has sensible value. Otherwise the shift computing the block size can overflow leading to undefined behavior...
CVE-2023-53534 drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc
In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: mtkdrmcrtc: Add checks for devmkcalloc As the devmkcalloc may return NULL, the return value needs to be checked to avoid NULL poineter dereference...
EUVD-2025-32387
In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: avoid buffer overflow in WID string configuration Fix the following copy overflow warning identified by Smatch checker. drivers/net/wireless/microchip/wilc1000/wlancfg.c:184 wilcwlanparseresponseframe error:...
CVE-2025-39931 crypto: af_alg - Set merge to zero early in af_alg_sendmsg
In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Set merge to zero early in afalgsendmsg If an error causes afalgsendmsg to abort, ctx-merge may contain a garbage value from the previous loop. This may then trigger a crash on the next entry into afalgsendmsg whe...
CVE-2025-39931 crypto: af_alg - Set merge to zero early in af_alg_sendmsg
In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Set merge to zero early in afalgsendmsg If an error causes afalgsendmsg to abort, ctx-merge may contain a garbage value from the previous loop. This may then trigger a crash on the next entry into afalgsendmsg whe...
libwebp:[email protected]: Use-of-uninitialized-value in WebPCleanupTransparentArea
Project: https://chromium.googlesource.com/webm/libwebp Detailed Report: https://oss-fuzz.com/testcase?key=4791382662512640 Project: libwebp Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzermsanlibwebp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
OSV-2025-808 Use-of-uninitialized-value in WebPMultRow_C
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=448792425 Crash type: Use-of-uninitialized-value Crash state: WebPMultRowC WebPMultRows WebPPictureRescale...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to check the platformgetresource return value, which could result in a null pointer dereference...
PT-2025-46088
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=448792425 Crash type: Use-of-uninitialized-value Crash state: WebPMultRow C WebPMultRows WebPPictureRescale...
CVE-2025-61962: Improper Neutralization of Value Delimiters
In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not setting the ctx-merge value correctly, which could lead to a crash...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unchecked codairamalloc return value that could lead to a null pointer dereference...