mpv:fuzzer_protocol_file: Use-of-uninitialized-value in read_distribution_bundle

Project: https://github.com/mpv-player/mpv.git Detailed Report: https://oss-fuzz.com/testcase?key=6022251122589696 Project: mpv Fuzzing Engine: libFuzzer Fuzz Target: fuzzerprotocolfile Job Type: libfuzzermsanmpv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in put_weighted_bipred_8_fallback

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5739271921664000 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

PT-2024-41577

Уязвимость функции ndev init debugfs модуля drivers/ntb/hw/intel/ntb hw gen1.c - драйвера поддержки непрозрачных мостов Intel ядра операционной системы Linux связана с неправильной проверкой возвращаемого значения функции. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в...

CVE-2024-45614

Puma is a Ruby/Rack web server built for parallelism. In affected versions clients could clobber values set by intermediate proxies such as X-Forwarded-For by providing a underscore version of the same header X-ForwardedFor. Any users relying on proxy set variables is affected. v6.4.3/v5.6.9 now...

nimbus-jose-jwt: large JWE p2c header value causes Denial of Service

A vulnerability was found in the Nimbus Jose JWT package. By crafting a JWE with an excessively large p2c value, an attacker can trigger significant resource consumption during decryption, potentially leading to application slowdown or unavailability...

SUSE CVE-2024-46725

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix out-of-bounds write warning Check the ring type value to fix the out-of-bounds write warning...

SUSE CVE-2024-46769

In the Linux kernel, the following vulnerability has been resolved: spi: intel: Add check devmkasprintf returned value intelspipopulatechip use devmkasprintf to set pdata-name. This can return a NULL pointer on failure but this returned value is not checked...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Use-of-uninitialized-value in ff_hevc_hls_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5427736120721408 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

CVE-2024-31185

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation ONF libfluid libfluidmsg module. This vulnerability is associated with program routine fluidmsg::of13::MeterBandList::unpack. This issue affects libfluid: 0.1.0...

CVE-2024-31196

CVE-2024-31196 affects libfluid 0.1.0 (libfluid_msg::ActionList::unpack10). The flaw is an unchecked Return Value leading to a NULL pointer dereference, reported as a denial of service vulnerability. Impact: availability loss (HIGH per NVD) with network attack vector, low complexity, no user inte...

CVE-2024-31196 NULL Pointer Dereference in libfluid_msg library

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation ONF libfluid libfluidmsg module. This vulnerability is associated with program routine fluidmsg::ActionList::unpack10. This issue affects libfluid: 0.1.0...

CVE-2024-31185

CVE-2024-31185 concerns an unchecked return value that leads to a NULL pointer dereference in the libfluid_msg module of Open Networking Foundation libfluid, specifically fluid_msg::of13::MeterBandList::unpack. Affected product: libfluid 0.1.0. Root cause described across sources as an unchecked ...

CVE-2024-31185 NULL Pointer Dereference in libfluid_msg library

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation ONF libfluid libfluidmsg module. This vulnerability is associated with program routine fluidmsg::of13::MeterBandList::unpack. This issue affects libfluid: 0.1.0...

CVE-2024-31182 NULL Pointer Dereference in libfluid_msg library

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation ONF libfluid libfluidmsg module. This vulnerability is associated with program routine fluidmsg::QueuePropertyList::unpack10. This issue affects libfluid: 0.1.0...

CVE-2024-31182 NULL Pointer Dereference in libfluid_msg library

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation ONF libfluid libfluidmsg module. This vulnerability is associated with program routine fluidmsg::QueuePropertyList::unpack10. This issue affects libfluid: 0.1.0...

CVE-2024-31167 NULL Pointer Dereference in libfluid_msg library

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation ONF libfluid libfluidmsg module. This vulnerability is associated with program routine fluidmsg::QueuePropertyList::unpack13. This issue affects libfluid: 0.1.0...

CVE-2024-31167

Consolidated details from connected sources confirm CVE-2024-31167 affects the Open Networking Foundation (ONF) libfluid package, specifically version 0.1.0, due to an unchecked return value leading to a NULL pointer dereference in the fluid_msg::QueuePropertyList::unpack13 routine. Impact: avail...

CVE-2024-31167 NULL Pointer Dereference in libfluid_msg library

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation ONF libfluid libfluidmsg module. This vulnerability is associated with program routine fluidmsg::QueuePropertyList::unpack13. This issue affects libfluid: 0.1.0...

CVE-2024-31165 NULL Pointer Dereference in libfluid_msg library

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation ONF libfluid libfluidmsg module. This vulnerability is associated with program routine fluidmsg::of13::SetFieldAction::unpack. This issue affects libfluid: 0.1.0...

CVE-2024-31165

Summary: CVE-2024-31165 is a NULL pointer dereference in Open Networking Foundation (ONF) libfluid, specifically in the libfluid_msg module’s fluid_msg::of13::SetFieldAction::unpack. The issue affects libfluid 0.1.0 and stems from an unchecked return value, enabling a NULL pointer dereference. Af...