16317 matches found
libfluid 安全漏洞
libfluid is an Open Networking open source application. A security vulnerability exists in libfluid that stems from the fact that the fluidmsg::QueuePropertyList::unpack13 routine contains a null pointer dereference vulnerability caused by an unchecked return value...
Cloud Logging Tips and Tricks
Getting the most value out of your cloud logs...
imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in HeifContext::has_alpha
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5327157381890048 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...
PT-2024-6397 · Unknown · Dual-Redundant Platform For Computer
Name of the Vulnerable Software and Affected Versions: Dual-redundant Platform for Computer affected versions not specified Description: A Denial of Service DoS issue has been identified, which can be triggered by sending a large number of UDP broadcast packets to a computer with the affected...
Linux KVM arm64 DoS
The vulnerability of the fixupguestexit function in the arm64 component of the KVM virtualization subsystem of the Linux operating system is related to the use of an outdated value of esr when a SError exception occurs. Exploiting this vulnerability can allow an attacker to cause a service failur...
OSV-2024-1071 Use-of-uninitialized-value in Poco::Dynamic::Var::~Var
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538385 Crash type: Use-of-uninitialized-value Crash state: Poco::Dynamic::Var::Var void Poco::JSON::Object::doStringifystd::1::mapstd::1::basicstringchar, Poco::JWT::Serializer::serialize...
libjpeg-turbo:decompress_yuv_fuzzer_dev: Use-of-uninitialized-value in decompress_yuv.cc
Detailed Report: https://oss-fuzz.com/testcase?key=6185125941936128 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: decompressyuvfuzzerdev Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: decompressyuv.cc...
CVE-2024-44096
there is a possible arbitrary read due to an insecure default value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-44096
there is a possible arbitrary read due to an insecure default value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-44096
CVE-2024-44096 affects Google Pixel devices (Android) and is caused by an insecure default value that enables an arbitrary read, potentially leading to local information disclosure with system execution privileges. Exploitation does not require user interaction. The issue is listed in the Pixel s...
CVE-2024-44096
there is a possible arbitrary read due to an insecure default value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...
Fundamentals of GraphQL-specific attacks
GraphQL vs REST APIs Developers are constantly exploring new technologies that can improve the performance, flexibility, and usability of applications. GraphQL is one such technology that has gained significant attention for its ability to fetch data efficiently. Unlike the traditional REST API,...
poco:jwt_decode_fuzzer: Use-of-uninitialized-value in Poco::Dynamic::Var::~Var
Project: https://github.com/pocoproject/poco.git Detailed Report: https://oss-fuzz.com/testcase?key=5129032620900352 Project: poco Fuzzing Engine: libFuzzer Fuzz Target: jwtdecodefuzzer Job Type: libfuzzermsanpoco Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash Stat...
ffmpeg:ffmpeg_dem_QCP_fuzzer: Use-of-uninitialized-value in qcp_read_header
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4647386712965120 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemQCPfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
ffmpeg:ffmpeg_AV_CODEC_ID_EATGQ_fuzzer: Use-of-uninitialized-value in tgq_decode_frame
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5607656650244096 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDEATGQfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...
PT-2024-30947 · Google · Android
Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to an insecure default value, which could lead to a possible arbitrary read. This might cause local information disclosure with System execution privileges needed. Use...
Google Pixel 安全漏洞
Google Pixel is a smartphone from Google USA. Google Pixel suffers from a security vulnerability that stems from the inclusion of an insecure default value that could be read arbitrarily...
Linux kernel Integer Bit Shift DoS
The vulnerability of the Linux operating system’s kernel is related to an incorrect bit offset for a integer value. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
SUSE CVE-2024-45016
In the Linux kernel, the following vulnerability has been resolved: netem: fix return value if duplicate enqueue fails There is a bug in netemenqueue introduced by commit 5845f706388a "net: netem: fix skb length BUGON in skbtosgvec" that can lead to a use-after-free. This commit made netemenqueue...
bgpattrencap Heap Buffer Overflow DoS
The vulnerability of the bgpattrencap function in the bgpd/bgpattr.c file of the networking routing implementation software for Unix-like systems in FRRouting is related to the lack of checking the actual remaining flow length before assigning a value to the TLV. Exploiting this vulnerability cou...