16358 matches found
xz:fuzz_decode_stream: Use-of-uninitialized-value in crc32_arch_optimized
Detailed Report: https://oss-fuzz.com/testcase?key=4768769227423744 Project: xz Fuzzing Engine: libFuzzer Fuzz Target: fuzzdecodestream Job Type: libfuzzermsanxz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: crc32archoptimized lzmaindexhashdecode streamdeco...
CVE-2024-35176
REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this...
PT-2024-12918 · Intel · Intel Stratix 10 +1
Name of the Vulnerable Software and Affected Versions: IntelR Stratix 10 and IntelR Agilex 7 FPGAs versions prior to 23.3 Description: The issue is related to an unchecked return value in the SDM firmware, which may allow an authenticated user to potentially enable denial of service via adjacent...
Intel Stratix 10 and Intel Agilex 7 FPGAs security vulnerabilities
Intel FPGAs Pro Edition Software is a fully supported software development kit for FPGA Field-Programmable Gate Array developers from Intel Corporation. A security vulnerability previously existed in Intel Stratix 10 and Intel Agilex 7 FPGAs version 23.3, which stemmed from an unchecked return...
CVE-2024-35176: Uncontrolled Resource Consumption
REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this...
CVE-2023-41092: Unchecked Return Value
Unchecked return value in SDM firmware for IntelR Stratix 10 and IntelR Agilex 7 FPGAs before version 23.3 may allow an authenticated user to potentially enable denial of service via adjacent access...
imagemagick:encoder_psd_fuzzer: Use-of-uninitialized-value in ReadPSDChannelPixels
Detailed Report: https://oss-fuzz.com/testcase?key=5362873126682624 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ReadPSDChannelPixels ReadPSDLay...
libxml2:lint: Use-of-uninitialized-value in gz_comp
Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=5514320082436096 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: lint Job Type: libfuzzermsanlibxml2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
CVE-2023-6324
ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity...
CVE-2023-6324 ThroughTek Kalay SDK error in handling the PSK identity
ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity...
PT-2024-40776 · Libvpx · Libvpx
Name of the Vulnerable Software and Affected Versions: libvpx affected versions not specified Description: The issue is related to a crash caused by a use-of-uninitialized-value error. The crash occurs in the vpx codec peek stream info function, as reported by the OSS-Fuzz tool. Recommendations: ...
PT-2024-10403
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the br dev xmit function in the Linux kernel's net/bridge/br device.c module, which triggers an uninit value error when sending a short packet. This can be...
DEBIAN-CVE-2024-32611
HDF5 Library through 1.14.3 may use an uninitialized value in H5Aattrreleasetable in H5Aint.c...
CVE-2024-32611
HDF5 Library through 1.14.3 may use an uninitialized value in H5Aattrreleasetable in H5Aint.c...
AZL-40682 CVE-2024-32611 affecting package hdf5 for versions less than 1.14.4-1
HDF5 Library through 1.14.3 may use an uninitialized value in H5Aattrreleasetable in H5Aint.c...
AZL-40595 CVE-2024-32611 affecting package hdf5 for versions less than 1.14.4.3-1
HDF5 Library through 1.14.3 may use an uninitialized value in H5Aattrreleasetable in H5Aint.c...
CVE-2024-32611
HDF5 Library through 1.14.3 may use an uninitialized value in H5Aattrreleasetable in H5Aint.c...
UBUNTU-CVE-2024-32611
HDF5 Library through 1.14.3 may use an uninitialized value in H5Aattrreleasetable in H5Aint.c...
CVE-2024-27280
A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte and ungetc methods on a StringIO can read past the end of a string, and a subsequent call to StringIO.gets may return the memory value. 3.0.3 is the main fix...
