PT-2024-40765 · Git +1 · Boringssl

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the ssl ctx make profiles function. Technical details...

PT-2024-40760 · Git +1 · Ninja

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the Lexer::Error function, which is called by...

imagemagick:encoder_mvg_fuzzer: Use-of-uninitialized-value in GetMagickProperty

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5455391797346304 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

imagemagick:encoder_pes_fuzzer: Use-of-uninitialized-value in ReadPESImage

Detailed Report: https://oss-fuzz.com/testcase?key=5102673178198016 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpesfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ReadPESImage ReadImage...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in void grk::N_AVX2::vscheduler<grk::N_AVX2::DecompressDcShiftIrrev>

Detailed Report: https://oss-fuzz.com/testcase?key=4627634813206528 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void grk::NAVX2::vscheduler...

skia:image_decode: Use-of-uninitialized-value in format_message

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=4980167071039488 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: imagedecode Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

imagemagick:encoder_jng_fuzzer: Use-of-uninitialized-value in ReadOneJNGImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4795448530370560 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderjngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

imagemagick:encoder_ept_fuzzer: Use-of-uninitialized-value in DecodeLabImage

Detailed Report: https://oss-fuzz.com/testcase?key=5876923570913280 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodereptfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: DecodeLabImage ReadTIFFImage...

imagemagick:encoder_pict_fuzzer: Use-of-uninitialized-value in TransformImageColorspace

Detailed Report: https://oss-fuzz.com/testcase?key=6248538089521152 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpictfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: TransformImageColorspace...

libultrahdr:ultrahdr_dec_fuzzer: Use-of-uninitialized-value in format_message

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=5926544905142272 Project: libultrahdr Fuzzing Engine: libFuzzer Fuzz Target: ultrahdrdecfuzzer Job Type: libfuzzermsanlibultrahdr Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

ninja:fuzzer: Use-of-uninitialized-value in Lexer::Error

Project: https://github.com/ninja-build/ninja.git Detailed Report: https://oss-fuzz.com/testcase?key=5745482170171392 Project: ninja Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanninja Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

SUSE CVE-2024-27008

In the Linux kernel, the following vulnerability has been resolved: drm: nv04: Fix out of bounds access When Output Resource dcb-or value is assigned in fabricatedcboutput, there may be out of bounds access to dacusers array in case dcb-or is zero because ffsdcb-or is used as index there. The 'or...

sqlite3:ossfuzz: Use-of-uninitialized-value in sqlite3BtreeTransferRow

Detailed Report: https://oss-fuzz.com/testcase?key=6717496559206400 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: sqlite3BtreeTransferRow sqlite3VdbeExec...

pjsip:fuzz-crypto: Use-of-uninitialized-value in encode_base64_differential

Project: https://github.com/pjsip/pjproject.git Detailed Report: https://oss-fuzz.com/testcase?key=6557392956358656 Project: pjsip Fuzzing Engine: libFuzzer Fuzz Target: fuzz-crypto Job Type: libfuzzermsanpjsip Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

OSV-2024-404 Use-of-uninitialized-value in avifSequenceHeaderParse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68568 Crash type: Use-of-uninitialized-value Crash state: avifSequenceHeaderParse avifDecoderReset avifDecoderParse...

PT-2024-40756 · Avif · Avif

Name of the Vulnerable Software and Affected Versions: avif affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the avifSequenceHeaderParse function, which is called by avifDecoderReset and avifDecoderParse...

libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in LibRaw::sget2

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5288757864497152 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

CVE-2024-34067 Multiple cross site scripting (XSS) vulnerabilities in the admin area of Pterodactyl panel

Pterodactyl is a free, open-source game server management panel built with PHP, React, and Go. Importing a malicious egg or gaining access to wings instance could lead to cross site scripting XSS on the panel, which could be used to gain an administrator account on the panel. Specifically, the...

opennavsurf-bag:bag_read_fuzzer: Use-of-uninitialized-value in H5RS__xstrdup

Detailed Report: https://oss-fuzz.com/testcase?key=4568335827140608 Project: opennavsurf-bag Fuzzing Engine: libFuzzer Fuzz Target: bagreadfuzzer Job Type: libfuzzermsanopennavsurf-bag Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: H5RSxstrdup H5RScreate...

wabt:read_binary_interp_fuzzer: Use-of-uninitialized-value in wabt::TypeChecker::GetRethrowLabel

Project: https://github.com/WebAssembly/wabt.git Detailed Report: https://oss-fuzz.com/testcase?key=5102590818844672 Project: wabt Fuzzing Engine: libFuzzer Fuzz Target: readbinaryinterpfuzzer Job Type: libfuzzermsanwabt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...