ROS-20260128-73-0037

Vulnerability in kernel-lt related to an unchecked return value. Exploitation of the vulnerability may allow an attacker to cause a denial of service...

CVE-2025-61140: Improperly Controlled Modification of Object Prototype Attributes

The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution...

cmake:xml_parser_fuzzer: Use-of-uninitialized-value in lookup

Project: https://gitlab.kitware.com/cmake/cmake.git Detailed Report: https://oss-fuzz.com/testcase?key=5039238658981888 Project: cmake Fuzzing Engine: libFuzzer Fuzz Target: xmlparserfuzzer Job Type: libfuzzermsancmake Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005069)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005069 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bridge: xmit: make sure we have at least eth header len bytes syzbot triggered an uninit...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005133)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005133 advisory. In the Linux kernel, the following vulnerability has been resolved: ELF: fix kernel.randomizevaspace double read ELF loader uses randomizevaspace twice. It is sysctl...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005131)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005131 advisory. In the Linux kernel, the following vulnerability has been resolved: ppp: fix pppasyncencode illegal access syzbot reported an issue in pppasyncencode 1 In this case,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005093)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005093 advisory. In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfsinodeinfo after hfsallocinode Syzbot reports uninitialized...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005025)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005025 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: make apf token non-zero to fix bug In current async pagefault logic, when a page is...

UBUNTU-CVE-2025-11687

A flaw was found in the gi-docgen. This vulnerability allows arbitrary JavaScript execution in the context of the page — enabling DOM access, session cookie theft and other client-side attacks — via a crafted URL that supplies a malicious value to the q GET parameter reflected DOM XSS...

kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping

A flaw was found in the Linux kernel’s ASoC Intel bytcrrt5640 driver. When an invalid value is passed via the driver’s “quirk” input option, the driver merely logs an error and retains the invalid value, rather than correcting it. This can result in out-of-bounds OOB memory access...

WordPress MetForm - Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin <= 4.1.0 - Unauthenticated Form Submission Exposure via Forgeable Cookie Value vulnerability

WordPress MetForm - Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin = 4.1.0 - Unauthenticated Form Submission Exposure via Forgeable Cookie Value vulnerability discovered by type5afe in WordPress Plugin Metform versions = 4.1.0...

OSV-2026-144 Use-of-uninitialized-value in initFilter

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=478301104 Crash type: Use-of-uninitialized-value Crash state: initFilter ffswsinitsinglecontext mpswsreinit...

PT-2026-6536

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=478301104 Crash type: Use-of-uninitialized-value Crash state: initFilter ff sws init single context mp sws reinit...

ROS-20260126-73-0053

A vulnerability in the virtiofs component of the Linux operating system kernel is related to improper validation of a function's return value. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

pcapplusplus:FuzzTargetNg: Use-of-uninitialized-value in pcpp::computeChecksum

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4952771974725632 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTargetNg Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

pcapplusplus:FuzzTargetNg: Use-of-uninitialized-value in pcpp::computeChecksum

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4890292978515968 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTargetNg Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

mpv:fuzzer_set_property_MPV_FORMAT_STRING_1: Use-of-uninitialized-value in initFilter

Project: https://github.com/mpv-player/mpv.git Detailed Report: https://oss-fuzz.com/testcase?key=5053287094353920 Project: mpv Fuzzing Engine: libFuzzer Fuzz Target: fuzzersetpropertyMPVFORMATSTRING1 Job Type: libfuzzermsanmpv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

Linux Kernel Security Vulnerabilities

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper handling of VLAN encapsulation, potentially leading to uninitialized value errors...

CVE-2024-11976

The The BuddyPress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 14.3.3. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible for...

CVE-2026-0633 MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 4.1.0 - Unauthenticated Form Submission Exposure via Forgeable Cookie Value

The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.1.0. This is due to the use of a forgeable cookie value derived only from the entry ID and current user ID without...