969 matches found
skia/sksl2spirv: Use-of-uninitialized-value in std::__1::__constrain_hash
Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5680592508682240 Project: skia Fuzzer: libFuzzerskiasksl2spirv Fuzz target binary: sksl2spirv Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...
tinyxml2/xmltest: Use-of-uninitialized-value in tinyxml2::StrPair::ParseText
Project: https://github.com/leethomason/tinyxml2.git Detailed report: https://oss-fuzz.com/testcase?key=5752728054136832 Project: tinyxml2 Fuzzer: libFuzzertinyxml2xmltest Fuzz target binary: xmltest Job Type: libfuzzermsantinyxml2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
systemd - DynamicUser can Create setuid Binaries when Assisted by Another Process
systemd - DynamicUser can Create setuid Binaries when Assisted by Another Process This bug report describes a bug in systemd that allows a service with DynamicUser in collaboration with another service or user to create a setuid binary that can be used to access its UID beyond the lifetime of the...
Google Chrome 73.0.3683.103 V8 JavaScript Engine Denial Of Service
var arr1 = 0,1; function ObjCreatemake this.make = make; var obj1 = new ObjCreate; function main arr1.reducef3; Object.getOwnPropertyDescriptorsArray99.joinobj1.make; function f3 obj1"make" = RegExpArray60000.join"CCC";...
karchive/karchive_fuzzer: Use-of-uninitialized-value in qstrlen
Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5640360216231936 Project: karchive Fuzzer: libFuzzerkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...
CVE-2019-11035
When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exifiifaddvalue function. This may lead to information disclosure or crash...
sqlite3/ossfuzz: Use-of-uninitialized-value in accessPayload
Detailed report: https://oss-fuzz.com/testcase?key=5707266847670272 Project: sqlite3 Fuzzer: libFuzzersqlite3ossfuzz Fuzz target binary: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: accessPayload vdbeMemFromBtreeResiz...
lzma/lzma2enc_fuzzer: Heap-buffer-overflow in OutputBuffer::Write
Detailed report: https://oss-fuzz.com/testcase?key=5186974492655616 Project: lzma Fuzzer: afllzmalzma2encfuzzer Fuzz target binary: lzma2encfuzzer Job Type: aflasanlzma Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x60c0000003c0 Crash State: OutputBuffer::Write...
Internet Bug Bounty: Uninitialized read in exif_process_IFD_in_MAKERNOTE
This bug is present in exifprocessIFDinMAKERNOTE method of ext/exif/exif.c file. Detailed description and steps to reproduce for this bug is present in bug report submitted to php.net. Bug Report : https://bugs.php.net/bug.php?id=77563 PHP version : 7.1.26 CVE-ID : 2019-9638 Impact Uninitialized...
unicorn/fuzz_emu_mips_32be: Crash in mips_release_mips
Project: https://github.com/unicorn-engine/unicorn.git Detailed report: https://oss-fuzz.com/testcase?key=5663967185207296 Project: unicorn Fuzzer: libFuzzerunicornfuzzemumips32be Fuzz target binary: fuzzemumips32be Job Type: libfuzzerasanunicorn Platform Id: linux Crash Type: UNKNOWN WRITE Crash...
capstone/fuzz_disasmnext: Use-of-uninitialized-value in ARM_post_printer
Detailed report: https://oss-fuzz.com/testcase?key=5650842838892544 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ARMpostprinter...
tesseract-ocr/fuzzer-api: Index-out-of-bounds in IntegerMatcher::UpdateTablesForFeature
Detailed report: https://oss-fuzz.com/testcase?key=5758158432108544 Project: tesseract-ocr Fuzzer: libFuzzertesseract-ocrfuzzer-api Fuzz target binary: fuzzer-api Job Type: libfuzzerubsantesseract-ocr Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...
Sony Playstation 4 (PS4) 6.20 - WebKit Code Execution (PoC)
Sony Playstation 4 PS4 6.20 - WebKit Code Execution PoC PS4 6.20 WebKit Code Execution PoC ============== This repo contains a proof-of-concept PoC RCE exploit targeting the PlayStation 4 on firmware 6.20 leveraging CVE-2018-4441. The exploit first establishes an arbitrary read/write primitive as...
Sony Playstation 4 (PS4) < 6.20 - WebKit Code Execution (PoC)
PS4 6.20 WebKit Code Execution PoC ============== This repo contains a proof-of-concept PoC RCE exploit targeting the PlayStation 4 on firmware 6.20 leveraging CVE-2018-4441. The exploit first establishes an arbitrary read/write primitive as well as an arbitrary object address leak in wkexploit.j...
Internet Bug Bounty: DOS in stream filters
see bug report https://bugs.php.net/bug.php?id=76249 as simple as one process running in an endless loop Impact DOS, process ends up in an endless loop, CPU or available php processes or both of affected system get easily exhausted...
UserLAnd - The Easiest Way To Run A Linux Distribution or Application on Android
The easiest way to run a Linux distribution or application on Android. Features: Run full linux distros or specific applications on top of Android. Install and uninstall like a regular app. No root required. Start using UserLAnd There are two ways to use UserLAnd: single-click apps and user-defin...
Stable Channel Update for Chrome OS
The Stable channel has been updated to 72.0.3626.122 Platform version: 11316.165.0 for most Chrome OS devices. This build contains a number of bug fixes, security updates and feature enhancements. A list of changes can be found here, including a fix for CVE-2019-5786. If you find new issues, plea...
capstone/fuzz_disasmnext: Use-of-uninitialized-value in printOperand
Detailed report: https://oss-fuzz.com/testcase?key=5687796902133760 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: printOperand...
mupdf/pdf_fuzzer: Use-of-uninitialized-value in fz_clamp
Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5658959258583040 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...