graphicsmagick:coder_TIFF_fuzzer: Use-of-uninitialized-value in jbg_newlen

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5904879758934016 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderTIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

PT-2025-2368 · Linux Foundation · Magma

Name of the Vulnerable Software and Affected Versions: Linux Foundation Magma versions = 1.8.0 Description: A buffer overflow was discovered in the decode protocol configuration options function at /3gpp/3gpp 24.008 sm ies.c. This issue allows attackers to cause a Denial of Service DoS via a...

PT-2025-2374 · Linux Foundation · Magma

Name of the Vulnerable Software and Affected Versions: Linux Foundation Magma versions = 1.8.0 Description: A buffer overflow was discovered in the decode esm message container function at /nas/ies/EsmMessageContainer.cpp. This issue allows attackers to cause a Denial of Service DoS via a crafted...

PT-2025-2375

Name of the Vulnerable Software and Affected Versions: Magma versions 1.8.0 and earlier Description: A reachable assertion in the decode access point name ie function allows attackers to cause a Denial of Service DoS via a crafted NAS packet. Recommendations: For Magma versions 1.8.0 and earlier,...

PT-2025-2371

Name of the Vulnerable Software and Affected Versions: Magma versions 1.8.0 and earlier Description: A reachable assertion in the decode linked ti ie function allows attackers to cause a Denial of Service DoS via a crafted NAS packet. Recommendations: For Magma versions 1.8.0 and earlier, update ...

PT-2025-2373

Name of the Vulnerable Software and Affected Versions: Linux Foundation Magma versions = 1.8.0 Description: A stack overflow was discovered in the decode protocol configuration options function at /3gpp/3gpp 24.008 sm ies.c. This issue allows attackers to cause a Denial of Service DoS via a craft...

PT-2025-2372

Name of the Vulnerable Software and Affected Versions: Magma versions 1.8.0 and earlier Description: A type confusion in the nas message decode function allows attackers to execute arbitrary code or cause a Denial of Service DoS via a crafted NAS packet. This issue can lead to persistent denial o...

PT-2025-2367

Name of the Vulnerable Software and Affected Versions: Linux Foundation Magma versions = 1.8.0 Description: A buffer overflow was discovered in the decode access point name ie function at /3gpp/3gpp 24.008 sm ies.c. This issue allows attackers to cause a Denial of Service DoS via a crafted NAS...

Open5GS 安全漏洞

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A security vulnerability exists in the Open5GS oainas5gmmdecode function, which can be exploited by an attacker to trigger a denial of service DoS via a crafted NGAP packe...

PT-2025-2370

Name of the Vulnerable Software and Affected Versions: Linux Foundation Magma versions = 1.8.0 Description: A buffer overflow was discovered in the decode traffic flow template packet filter function at /3gpp/3gpp 24.008 sm ies.c. This issue allows attackers to cause a Denial of Service DoS via a...

PT-2025-2369

Name of the Vulnerable Software and Affected Versions: Linux Foundation Magma versions = 1.8.0 Description: A buffer overflow was discovered in the decode pdn address function at /nas/ies/PdnAddress.cpp, allowing attackers to cause a Denial of Service DoS via a crafted NAS packet. Recommendations...

CVE-2025-23039 Cross Site Scripting on URL decode Tooltip in Caido

Caido is a web security auditing toolkit. A Cross-Site Scripting XSS vulnerability was identified in Caido v0.45.0 due to improper sanitization in the URL decoding tooltip of HTTP request and response editors. This issue could allow an attacker to execute arbitrary scripts, potentially leading to...

OESA-2025-1052 podman security update

Podman manages the entire container ecosystem which includes pods, containers, container images, and container volumes using the libpod library. Security Fixes: Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of...

OESA-2025-1054 podman security update

Podman manages the entire container ecosystem which includes pods, containers, container images, and container volumes using the libpod library. Security Fixes: Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of...

PT-2025-5655 · Opencv · Opencv

Name of the Vulnerable Software and Affected Versions: OpenCV affected versions not specified Description: The issue is related to a heap buffer overflow read in the PngDecoder of OpenCV. The crash occurs in the cv::PngDecoder::readHeader function, which is called by cv::imdecode and cv::imdecode...

open62541:fuzz_json_decode: Negative-size-param in removeFieldFromEncoding

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=6046017237090304 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsondecode Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash...

PT-2026-4360

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the tpm2 load cmd function. This function allocates a temporary blob via tpm2 key decode but does not free it in failure scenarios. The issue i...

PT-2025-30799

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The core scsi3 decode spec i port function may experience a NULL pointer dereference in its error code path when the dest se deve pointer is unset. This occurs when unconditionally calli...

PT-2026-2877

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's libceph component where the decode pool function may be susceptible to out-of-bounds reads. This can occur if an osdmap is corrupted, specifically whe...

SUSE CVE-2024-56705

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: Add check for rgbydata memory allocation failure In iacss3astatisticsallocate, there is no check on the allocation result of the rgbydata memory. If rgbydata is not successfully allocated, it may trigger the...