tinyusb:cdc: Use-of-uninitialized-value in cdc_task

Project: https://github.com/hathach/tinyusb.git Detailed Report: https://oss-fuzz.com/testcase?key=5375112953004032 Project: tinyusb Fuzzing Engine: libFuzzer Fuzz Target: cdc Job Type: libfuzzermsantinyusb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

skia-ftz:svg_dom: Use-of-uninitialized-value in SkShaper::MakeStdLanguageRunIterator

Detailed Report: https://oss-fuzz.com/testcase?key=5031219378061312 Project: skia-ftz Fuzzing Engine: libFuzzer Fuzz Target: svgdom Job Type: libfuzzermsanskia-ftz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: SkShaper::MakeStdLanguageRunIterator...

matio:matio_fuzzer: Use-of-uninitialized-value in Mat_floatSwap

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=4759878041141248 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-val...

CVE-2024-23462: Improper Validation of Integrity Check Value

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS allows a denial of service of the Client Connector binary and thus removing client functionality.This issue affects Client Connector on MacOS: before 3.4...

CVE-2024-2085: Improper Neutralization of Input During Web Page Generation

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'size' value in several widgets all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

Zscaler Client Connector security vulnerability

Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and comply with the organization's policies, even when not on the corporate network. A security...

Zscaler Client Connector security vulnerability

Zscaler Client Connector is an application from zscaler. An application that is installed on a device to ensure that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A...

CVE-2024-23461: Improper Validation of Integrity Check Value

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS during the upgrade process may allow a Local Execution of Code.This issue affects Client Connector on MacOS: before 3.4...

CVE-2023-41970: Improper Validation of Integrity Check Value

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on Windows during the Repair App functionality may allow Local Execution of Code.This issue affects Client Connector on Windows: before 4.1.0.62...

skia-ftz:svg_dom: Use-of-uninitialized-value in SkParsePath::FromSVGString

Detailed Report: https://oss-fuzz.com/testcase?key=4683138927230976 Project: skia-ftz Fuzzing Engine: libFuzzer Fuzz Target: svgdom Job Type: libfuzzermsanskia-ftz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: SkParsePath::FromSVGString SkTLazy...

ninja:fuzzer: Use-of-uninitialized-value in Lexer::ReadToken

Project: https://github.com/ninja-build/ninja.git Detailed Report: https://oss-fuzz.com/testcase?key=4631807518638080 Project: ninja Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanninja Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

CVE-2024-27051

CVE-2024-27051 centers on the Linux kernel’s cpufreq/brcmstb-avs-cpufreq code. The underlying issue is that cpufreq_cpu_get could return NULL, risking a NULL dereference. The fix adds a check and returns 0 on error, as described in the advisory lines: “cpufreq_cpu_get may return NULL. To avoid NU...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::Scheduler::run

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=4595795868319744 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id...

nghttp2:nghttp2_fuzzer_frames: Use-of-uninitialized-value in lookup_token

Project: https://github.com/nghttp2/nghttp2.git Detailed Report: https://oss-fuzz.com/testcase?key=4582323763871744 Project: nghttp2 Fuzzing Engine: libFuzzer Fuzz Target: nghttp2fuzzerframes Job Type: libfuzzermsannghttp2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

DEBIAN-CVE-2024-27008

In the Linux kernel, the following vulnerability has been resolved: drm: nv04: Fix out of bounds access When Output Resource dcb-or value is assigned in fabricatedcboutput, there may be out of bounds access to dacusers array in case dcb-or is zero because ffsdcb-or is used as index there. The 'or...

AZL-57731 CVE-2024-26982 affecting package kernel for versions less than 5.15.179.1-1

In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the inode number is not the invalid value of zero Syskiller has produced an out of bounds access in fillmetaindex. That out of bounds access is ultimately caused because the inode has an inode number with the...

CVE-2024-26988 init/main.c: Fix potential static_command_line memory overflow

In the Linux kernel, the following vulnerability has been resolved: init/main.c: Fix potential staticcommandline memory overflow We allocate memory of size 'xlen + strlenbootcommandline + 1' for staticcommandline, but the strings copied into staticcommandline are extracommandline and commandline,...

CVE-2024-26982

In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the inode number is not the invalid value of zero Syskiller has produced an out of bounds access in fillmetaindex. That out of bounds access is ultimately caused because the inode has an inode number with the...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from a failure to check if the value of "replay" is NULL...

PT-2024-40749 · Git +1 · Libpcap

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of "Use-of-uninitialized-value". The crash state involves several functions: pcapint filter with aux data, pcapint...