cras:cras_fl_media_fuzzer: Use-of-uninitialized-value in validate_bluetooth_device_address

Detailed Report: https://oss-fuzz.com/testcase?key=6559408940187648 Project: cras Fuzzing Engine: libFuzzer Fuzz Target: crasflmediafuzzer Job Type: libfuzzermsancras Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: validatebluetoothdeviceaddress...

ots:ots-fuzzer: Use-of-uninitialized-value in ProcessGeneric

Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=6402542306131968 Project: ots Fuzzing Engine: libFuzzer Fuzz Target: ots-fuzzer Job Type: libfuzzermsanots Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

oniguruma:fuzzer: Use-of-uninitialized-value in prs_exp

Detailed Report: https://oss-fuzz.com/testcase?key=6349358873247744 Project: oniguruma Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanoniguruma Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: prsexp prsbranch prsalts Sanitizer: memory MS...

speex:speex_decode_fuzzer_fixed: Use-of-uninitialized-value in compute_rms16

Project: https://gitlab.xiph.org/xiph/speex.git Detailed Report: https://oss-fuzz.com/testcase?key=6142339463577600 Project: speex Fuzzing Engine: libFuzzer Fuzz Target: speexdecodefuzzerfixed Job Type: libfuzzermsanspeex Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

ndpi:fuzz_ds_ahocorasick: Use-of-uninitialized-value in ndpi_strdup

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5932049415340032 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzdsahocorasick Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

simdjson:fuzz_padded: Use-of-uninitialized-value in fuzz_padded.cpp

Detailed Report: https://oss-fuzz.com/testcase?key=5898062902919168 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzpadded Job Type: libfuzzermsansimdjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: fuzzpadded.cpp Sanitizer: memory MSAN...

mupdf:pdf_fuzzer: Use-of-uninitialized-value in format_message

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5814064644161536 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

wabt:read_binary_interp_fuzzer: Use-of-uninitialized-value in wabt::TypeChecker::PrintStackIfFailedV

Project: https://github.com/WebAssembly/wabt.git Detailed Report: https://oss-fuzz.com/testcase?key=5774845552951296 Project: wabt Fuzzing Engine: libFuzzer Fuzz Target: readbinaryinterpfuzzer Job Type: libfuzzermsanwabt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...

ninja:fuzzer: Use-of-uninitialized-value in Lexer::Error

Project: https://github.com/ninja-build/ninja.git Detailed Report: https://oss-fuzz.com/testcase?key=5190727624622080 Project: ninja Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanninja Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

mupdf:pdf_fuzzer: Use-of-uninitialized-value in format_message

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5150032104849408 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

valijson:fuzzer: Use-of-uninitialized-value in void std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocat

Project: https://github.com/tristanpenman/valijson.git Detailed Report: https://oss-fuzz.com/testcase?key=4815257255084032 Project: valijson Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanvalijson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

freetype2:glyphs-bitmaps-pcf: Use-of-uninitialized-value in compute_ULong_sum

Detailed Report: https://oss-fuzz.com/testcase?key=4544574155456512 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: glyphs-bitmaps-pcf Job Type: libfuzzermsanfreetype2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: computeULongsum sfntinitface...

kernel: usb-storage: alauda: Fix uninit-value in alauda_check_media()

An uninitialized value vulnerability was found in the alauda USB storage driver in the Linux kernel. In alaudacheckmedia, the function does not verify that USB transfer operations succeeded before using the received data. If a transfer fails, uninitialized memory may be accessed, leading to...

kernel: drm/amd/display: Fix possible underflow for displays with large vblank

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix possible underflow for displays with large vblank Why Underflow observed when using a display with a large vblank region and low refresh rate How Simplify calculation of vblanknom Increase value for...

kernel: ext4: add bounds checking in get_max_inline_xattr_value_size()

In the Linux kernel, the following vulnerability has been resolved: ext4: add bounds checking in getmaxinlinexattrvaluesize Normally the extended attributes in the inode body would have been checked when the inode is first opened, but if someone is writing to the block device while the file syste...

kernel: efi: fix potential NULL deref in efi_mem_reserve_persistent

A flaw was found in the EFI module in the Linux kernel. A NULL pointer dereference can be triggered due to a missing check of the return value of the memremap function, causing a crash and resulting in a denial of service...

kernel: null-ptr-deref in alloc_workqueue

A NULL pointer dereference flaw was found in allocworkqueue in the Linux Kernel. Check the allocworkqueue return value in radeoncrtcinit to avoid null-ptr-deref...

kernel: iommufd: Set end correctly when doing batch carry

In the Linux kernel, the following vulnerability has been resolved: iommufd: Set end correctly when doing batch carry Even though the test suite covers this it somehow became obscured that this wasn't working. The test iommufdioas.mockdomain.accessdomaindestory would blow up rarely. end should be...

CVE-2024-1895

The Event Monster – Event Management, Tickets Booking, Upcoming Event plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.4 via deserialization via shortcode of untrusted input from a custom meta value. This makes it possible for authenticated...

OSV-2024-357 Use-of-uninitialized-value in pcpp::PcapNgFileReaderDevice::getNextPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68167 Crash type: Use-of-uninitialized-value Crash state: pcpp::PcapNgFileReaderDevice::getNextPacket pcpp::PcapNgFileReaderDevice::getNextPacket pcpp::IFileReaderDevice::getNextPackets...