CVE-2024-44070

An issue was discovered in FRRouting FRR through 10.1. bgpattrencap in bgpd/bgpattr.c does not check the actual remaining stream length before taking the TLV value...

mozilla: Out of bounds read in editor component

The Mozilla Foundation Security Advisory describes this flaw as: Editor code failed to check an attribute value. This could have led to an out-of-bounds read...

mozilla: Out of bounds read in editor component

The Mozilla Foundation Security Advisory describes this flaw as: Editor code failed to check an attribute value. This could have led to an out-of-bounds read...

CVE-2024-44070

An issue was discovered in FRRouting FRR through 10.1. bgpattrencap in bgpd/bgpattr.c does not check the actual remaining stream length before taking the TLV value...

CVE-2024-44070

An issue exists in FRRouting (FRR) where the bgp_attr_encap function in bgpd/bgp_attr.c fails to verify the actual remaining stream length before processing a TLV value . This vulnerability can lead to a High availability impact. Remediation involves applying updates such as the debian/patches/CV...

CVE-2024-44070

An issue was discovered in FRRouting FRR through 10.1. bgpattrencap in bgpd/bgpattr.c does not check the actual remaining stream length before taking the TLV value...

CVE-2024-44070

An issue was discovered in FRRouting FRR through 10.1. bgpattrencap in bgpd/bgpattr.c does not check the actual remaining stream length before taking the TLV value...

EulerOS Virtualization 2.10.1 : kernel (EulerOS-SA-2024-2140)

"According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In the Linux kernel, the following vulnerability has been resolved: kyber: fix out of bounds access when preempted...

ffmpeg:ffmpeg_dem_ARGO_BRP_fuzzer: Use-of-uninitialized-value in argo_brp_read_packet

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4692991866896384 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemARGOBRPfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

SUSE CVE-2024-42298

In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: fslqmcaudio: Check devmkasprintf returned value devmkasprintf can return a NULL pointer on failure but this returned value is not checked. Fix this lack and check the returned value...

SUSE CVE-2024-42311

In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfsinodeinfo after hfsallocinode Syzbot reports uninitialized value access issue as below: loop0: detected capacity change from 0 to 64 ===================================================== BUG:...

SUSE CVE-2024-43860

In the Linux kernel, the following vulnerability has been resolved: remoteproc: imxrproc: Skip over memory region when node value is NULL In imxrprocaddrinit "nph = ofcountphandlewithargs" just counts number of phandles. But phandles may be empty. So ofparsephandle in the parsing loop 0 a nph may...

OSV-2024-1031 Use-of-uninitialized-value in Http3FrameFactory::create

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537939 Crash type: Use-of-uninitialized-value Crash state: Http3FrameFactory::create Http3FrameFactory::fastcreate fuzzhttp3frame.cc...

PT-2024-41836

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537939 Crash type: Use-of-uninitialized-value Crash state: Http3FrameFactory::create Http3FrameFactory::fast create fuzz http3frame.cc...

libjpeg-turbo:transform_fuzzer_dev: Use-of-uninitialized-value in transform.cc

Detailed Report: https://oss-fuzz.com/testcase?key=5994260413874176 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: transformfuzzerdev Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: transform.cc Sanitizer:...

libjpeg-turbo:compress_yuv_fuzzer: Use-of-uninitialized-value in compress_yuv.cc

Detailed Report: https://oss-fuzz.com/testcase?key=4909354476699648 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: compressyuvfuzzer Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: compressyuv.cc...

AZL-49767 CVE-2024-43829 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/qxl: Add check for drmcvtmode Add check for the return value of drmcvtmode and return the error if it fails in order to avoid NULL pointer dereference...

CVE-2024-43860

In the Linux kernel, the following vulnerability has been resolved: remoteproc: imxrproc: Skip over memory region when node value is NULL In imxrprocaddrinit "nph = ofcountphandlewithargs" just counts number of phandles. But phandles may be empty. So ofparsephandle in the parsing loop 0 a nph may...

CVE-2024-42311

In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfsinodeinfo after hfsallocinode Syzbot reports uninitialized value access issue as below: loop0: detected capacity change from 0 to 64 ===================================================== BUG:...

AZL-48486 CVE-2024-42311 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfsinodeinfo after hfsallocinode Syzbot reports uninitialized value access issue as below: loop0: detected capacity change from 0 to 64 ===================================================== BUG:...