CVE-2026-109828

A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlikesubchunkparse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-109828 libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variable

A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlikesubchunkparse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been...

EUVD-2026-98900

A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlikesubchunkparse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-109828 libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variable

A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlikesubchunkparse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-109828

A vulnerability exists in libsndfile (up to version 1.2.2 ) within the WAV Parsing component. Specifically, the function wavlike_subchunk_parse in the file src/wavlike.c can be manipulated to cause the use of an uninitialized variable . This flaw enables remote exploitation , and an exploit has b...

CVE-2026-109828 libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variable

A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlikesubchunkparse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-109828

A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlikesubchunkparse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-109828

A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlikesubchunkparse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been...

Khronos Group NNEF-Tools path traversal vulnerability

The Khronos Group NNEF-Tools has a path traversal vulnerability. This vulnerability arises from path traversal through specially crafted variable tags. Attackers can create or overwrite the “.dat” file by providing a graph.nnef file with a “../” sequence or an absolute path tag during user...

Microsoft QUIC Security Feature Bypass Vulnerability

Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network...

EUVD-2026-98087

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable...

Microsoft Windows: CVE-2026-103577: Microsoft QUIC Security Feature Bypass Vulnerability

Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-111965

Name of the Vulnerable Software and Affected Versions Microsoft QUIC affected versions not specified Description Insecure default variable initialization allows an unauthorized remote attacker to bypass a security feature, specifically authentication, over a network. Recommendations At the moment...

CVE-2026-109828: Use of Uninitialized Variable

A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlikesubchunkparse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been...

PT-2026-111687

Name of the Vulnerable Software and Affected Versions libsndfile versions prior to 1.2.3 Description An issue exists in the WAV Parsing component within the wavlike subchunk parse function of the src/wavlike.c file. A specific manipulation can lead to the use of an uninitialized variable, which...

PT-2026-113475

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.79 Description The use of an uninitialized variable in the ThirdParty lmza sdk allows a remote attacker to potentially read memory inside the sandbox by using a crafted file. Recommendations Update...

CVE-2026-103577: Insecure Default Variable Initialization

Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-109854: Use of Uninitialized Variable

A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text can cause the library to read uninitialized memory from the stack. If the application exposes or returns the decoded output, this flaw can result in unexpected behavior and...

CVE-2026-110143: Use of Uninitialized Variable

Use of uninitialized variable in ThirdParty lmzasdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted file. Chromium security severity: High...

PT-2026-122248

A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike subchunk parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has be...