CVE-2024-32611

The HDF5 Library (versions through 1.14.3 ) is vulnerable to a flaw where it may use an uninitialized value in the H5A__attr_release_table field within the H5Aint.c file. This vulnerability is documented across multiple distributions, including Astra Linux , Tencent Linux , and Red Hat Enterprise...

CVE-2024-32611

HDF5 Library through 1.14.3 may use an uninitialized value in H5Aattrreleasetable in H5Aint.c...

CVE-2024-32611

HDF5 Library through 1.14.3 may use an uninitialized value in H5Aattrreleasetable in H5Aint.c...

libpcap:fuzz_both: Use-of-uninitialized-value in pcapint_filter_with_aux_data

Project: https://github.com/the-tcpdump-group/libpcap.git Detailed Report: https://oss-fuzz.com/testcase?key=4832318618402816 Project: libpcap Fuzzing Engine: libFuzzer Fuzz Target: fuzzboth Job Type: libfuzzermsanlibpcap Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

pcapplusplus:FuzzWriterNg: Use-of-uninitialized-value in pcpp::PcapFileWriterDevice::writePacket

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4808693244821504 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzWriterNg Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

CVE-2024-3727: Improper Validation of Integrity Check Value

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks...

PT-2024-6206

Name of the Vulnerable Software and Affected Versions HDF5 Library versions 1.14.3 and earlier Description The issue is related to the use of an uninitialized value in the H5A attr release table function in the H5Aint.c file of the HDF5 Library. This could potentially allow a remote attacker to...

imagemagick:encoder_inline_fuzzer: Use-of-uninitialized-value in LibRaw_bigfile_datastream::size

Detailed Report: https://oss-fuzz.com/testcase?key=6007132397830144 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderinlinefuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRawbigfiledatastream::siz...

poppler:qt_pdf_fuzzer: Use-of-uninitialized-value in opj_j2k_decode_tiles

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=6277932099108864 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...

OSV-2024-451 Use-of-uninitialized-value in XpackDynamicTable::_make_space

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66347 Crash type: Use-of-uninitialized-value Crash state: XpackDynamicTable::makespace XpackDynamicTable::insertentry XpackDynamicTable::insertentry...

OSV-2024-450 Use-of-uninitialized-value in ink_filepath_merge

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68468 Crash type: Use-of-uninitialized-value Crash state: inkfilepathmerge layoutrelative Layout::Layout...

PT-2024-40769

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the YAML parsing process, specifically in the...

PT-2024-40770 · Git +1 · Trafficserver

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of "Use-of-uninitialized-value". The crash state includes functions such as ink filepath merge, layout relative, and...

PT-2024-40772 · Git +1 · Pjsip

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of "Use-of-uninitialized-value" as reported by OSS-Fuzz. The crash occurs in the encode base64 differential function...

PT-2024-40771 · Unknown · Xpackdynamictable

Name of the Vulnerable Software and Affected Versions: XpackDynamicTable affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the XpackDynamicTable:: make space function, which is called by the...

PT-2024-6599

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an uninitialized value in the BPF CORE READ BITFIELD macro, defined in bpf core read.h. GCC warns that the val variable may be used uninitialized. The...

pcapplusplus:FuzzTargetNg: Use-of-uninitialized-value in std::__1::ostreambuf_iterator<char, std::__1::char_traits<char>> std::__1::__pad

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5158291033358336 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTargetNg Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

poppler:qt_textbox_fuzzer: Use-of-uninitialized-value in XRef::getCatalog

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5131386351583232 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...

poppler:doc_fuzzer: Use-of-uninitialized-value in Object::free

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=4655342846803968 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...

CVE-2024-4601

An incorrect authentication vulnerability has been found in Socomec Net Vision affecting version 7.20. This vulnerability allows an attacker to perform a brute force attack on the application and recover a valid session, because the application uses a five-digit integer value...