libcups:fuzzipp: Use-of-uninitialized-value in _cupsStrAlloc

Project: https://github.com/OpenPrinting/libcups.git Detailed Report: https://oss-fuzz.com/testcase?key=4637350360580096 Project: libcups Fuzzing Engine: libFuzzer Fuzz Target: fuzzipp Job Type: libfuzzermsanlibcups Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

libcups:fuzzipp: Use-of-uninitialized-value in cups_fill

Detailed Report: https://oss-fuzz.com/testcase?key=4600452195876864 Project: libcups Fuzzing Engine: libFuzzer Fuzz Target: fuzzipp Job Type: libfuzzermsanlibcups Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cupsfill cupsFileRead ippReadIO Sanitizer: memor...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the attributevalue function due to improper sanitization of SVG animate attributes. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious script into ...

CVE-2024-36734

Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting a negative value into the dim parameter...

CVE-2024-36734

The deep learning framework Oneflow (version v0.9.1 ) is vulnerable to a Denial of Service (DoS) attack due to improper input validation . An attacker can trigger this condition by providing a negative value into the dim parameter. As a temporary workaround, users should validate input to ensure ...

CVE-2024-36737

Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting a negative value into the oneflow.full parameter...

CVE-2024-36737

Oneflow version 0.9.1 is affected by a Denial of Service (DoS) vulnerability due to improper input validation . An attacker can trigger the DoS by providing a negative value into the oneflow.full parameter. As a temporary workaround, users should avoid using negative values in this parameter and ...

ruby: Buffer overread vulnerability in StringIO

A buffer overread flaw was found in rubygem StringIO. The ungetbyte and ungetc methods on a StringIO object can read past the end of a string, and a subsequent call to StringIO.gets may return the memory value...

igraph:misc_algos: Use-of-uninitialized-value in igraph_i_simplify_sorted_int_adjacency_vector_in_place

Detailed Report: https://oss-fuzz.com/testcase?key=5326261235810304 Project: igraph Fuzzing Engine: libFuzzer Fuzz Target: miscalgos Job Type: libfuzzermsanigraph Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: igraphisimplifysortedintadjacencyvectorinplace...

OSV-2024-538 Use-of-uninitialized-value in QUICVariableInt::size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69001 Crash type: Use-of-uninitialized-value Crash state: QUICVariableInt::size Http3SettingsFrame::Http3SettingsFrame Http3FrameFactory::create...

OSV-2024-535 Use-of-uninitialized-value in spvTextEncodeOperand

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69388 Crash type: Use-of-uninitialized-value Crash state: spvTextEncodeOperand spvTextEncodeOpcode spvTextToBinaryWithOptions...

CVE-2024-36745: Improper Input Validation

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting a negative value into the oneflow.indexselect parameter...

PT-2024-40791

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the QUICVariableInt::size function, which is called by...

CVE-2024-36737: Improper Input Validation

Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting a negative value into the oneflow.full parameter...

PT-2024-40790

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: spvTextEncodeOperand,...

CVE-2024-28995

SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine. Recent assessments: sfewer-r7 at June 13, 2024 9:17am UTC reported: Based upon our Rapid7 Analysis, I have rated the attacker value of this vulnerability...

poppler:doc_fuzzer: Use-of-uninitialized-value in Object::free

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=6232420583014400 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...

kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg

In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in smsc75xxreadreg The Linux kernel CVE team has assigned CVE-2023-52528 to this issue. Upstream advisory:...

kernel: wifi: iwlwifi: fix double-free bug

A vulnerability was found in the Linux kernel's iwlwifi driver, where the TLV PC register data being freed is not properly marked as NULL afterwards, resulting in a double-free issue. This could lead to memory corruption or crashes...

kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg

In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in smsc75xxreadreg The Linux kernel CVE team has assigned CVE-2023-52528 to this issue. Upstream advisory:...