lzma:7z_fuzzer: Use-of-uninitialized-value in CrcUpdateT8

Detailed Report: https://oss-fuzz.com/testcase?key=5172662262366208 Project: lzma Fuzzing Engine: libFuzzer Fuzz Target: 7zfuzzer Job Type: libfuzzermsanlzma Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: CrcUpdateT8 CrcCalc SzArExExtract Sanitizer: memory...

CVE-2024-20872

Improper handling of insufficient privileges vulnerability in TalkbackSE prior to version Android 14 allows local attackers to modify setting value of TalkbackSE...

WordPress Edwiser Bridge plugin <= 3.0.5 - Authentication Bypass due to Missing Empty Value Check vulnerability

Authentication Bypass due to Missing Empty Value Check vulnerability discovered by István Márton in WordPress Plugin Edwiser Bridge versions = 3.0.5...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void apply_sao_internal<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=5123853960413184 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void applysaointernal...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in decoder_context::construct_reference_picture_lists

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4937788024750080 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

CVE-2024-34387 WordPress WP Post Author plugin <= 3.6.4 - Rating Value Manipulation vulnerability

Missing Authorization vulnerability in AF themes WP Post Author.This issue affects WP Post Author: from n/a through 3.6.4...

CVE-2024-34387 WordPress WP Post Author plugin <= 3.6.4 - Rating Value Manipulation vulnerability

Missing Authorization vulnerability in AF themes WP Post Author.This issue affects WP Post Author: from n/a through 3.6.4...

imagemagick:encoder_jpc_fuzzer: Use-of-uninitialized-value in opj_j2k_decode_tiles

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6279718377684992 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderjpcfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

graphicsmagick:coder_BIE_fuzzer: Use-of-uninitialized-value in ImportViewPixelArea

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5815016505802752 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderBIEfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

openjpeg:opj_decompress_fuzzer_J2K: Use-of-uninitialized-value in opj_j2k_decode_tiles

Project: https://github.com/uclouvain/openjpeg.git https://github.com/uclouvain/openjpeg-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5438904854446080 Project: openjpeg Fuzzing Engine: libFuzzer Fuzz Target: opjdecompressfuzzerJ2K Job Type: libfuzzermsanopenjpeg Platform Id: linux...

xz:fuzz_encode_stream: Use-of-uninitialized-value in crc64_arch_optimized

Project: https://github.com/tukaani-project/xz.git Detailed Report: https://oss-fuzz.com/testcase?key=6606873663963136 Project: xz Fuzzing Engine: libFuzzer Fuzz Target: fuzzencodestream Job Type: libfuzzermsanxz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State...

imagemagick:encoder_mng_fuzzer: Use-of-uninitialized-value in CompositeImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5954971840348160 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

CVE-2024-20056

In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08528185; Issue ID: ALPS08528185...

CVE-2024-20056

In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08528185; Issue ID: ALPS08528185...

CVE-2024-20056

A vulnerability in the preloader component of MediaTek hardware allows for a local elevation of privilege due to an insecure default value. Successful exploitation can lead to the execution of code with System privileges and does not require user interaction. This issue was addressed in the 2024-...

PT-2024-18542

Name of the Vulnerable Software and Affected Versions preloader affected versions not specified Description The issue is related to an insecure default value in the preloader, which could lead to a local escalation of privilege. System execution privileges are needed for exploitation, and user...

PT-2024-27197

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential uninit-value access in the ip6 make skb function. To avoid a race condition, the code now checks FLOWI FLAG KNOWN NH on fl6-flowi6 flags instead of...

CVE-2024-20056: Improper Input Validation

In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08528185; Issue ID: ALPS08528185...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in Op_YCbCr_to_RGB<unsigned char>::convert_colorspace

Detailed Report: https://oss-fuzz.com/testcase?key=5859969999110144 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: OpYCbCrtoRGB::convertcolorspac...

graphicsmagick:coder_DCM_fuzzer: Use-of-uninitialized-value in ReadJPEGImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=4704540631826432 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderDCMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...