5502 matches found
imagemagick:encoder_mng_fuzzer: Use-of-uninitialized-value in TransformsRGBImage
Detailed Report: https://oss-fuzz.com/testcase?key=5172822962929664 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: TransformsRGBImage...
imagemagick:encoder_mvg_fuzzer: Use-of-uninitialized-value in GetMagickProperty
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5455391797346304 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...
imagemagick:encoder_pes_fuzzer: Use-of-uninitialized-value in ReadPESImage
Detailed Report: https://oss-fuzz.com/testcase?key=5102673178198016 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpesfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ReadPESImage ReadImage...
imagemagick:encoder_jng_fuzzer: Use-of-uninitialized-value in ReadOneJNGImage
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4795448530370560 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderjngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...
imagemagick:encoder_miff_fuzzer: Heap-buffer-overflow in ImportQuantumPixels
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5702031855648768 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermifffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...
SUSE CVE-2024-27074
In the Linux kernel, the following vulnerability has been resolved: media: go7007: fix a memleak in go7007loadencoder In go7007loadencoder, bouncei.e. go-bootfw, is allocated without a deallocation thereafter. After the following call chain: saa7134go7007init |- go7007bootencoder |-...
opus:opus_projection_encoder_fuzzer_fixed: Use-of-uninitialized-value in silk_encode_frame_FIX
Project: https://gitlab.xiph.org/xiph/opus.git Detailed Report: https://oss-fuzz.com/testcase?key=6375390378524672 Project: opus Fuzzing Engine: libFuzzer Fuzz Target: opusprojectionencoderfuzzerfixed Job Type: libfuzzermsanopus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
imagemagick:encoder_dng_fuzzer: Heap-buffer-overflow in LibRaw::process_Sony_ADDRESS
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4971655282622464 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...
PT-2024-40753 · Unknown · Checkstyle
Name of the Vulnerable Software and Affected Versions: Checkstyle affected versions not specified Description: A security exception occurs in the JavaLanguageParser.expr function, potentially related to encoding issues in the UTF 8.updatePositions and UTF 8$Encoder.encodeArrayLoop functions...
CVE-2024-27074
In the Linux kernel, the following vulnerability has been resolved: media: go7007: fix a memleak in go7007loadencoder In go7007loadencoder, bouncei.e. go-bootfw, is allocated without a deallocation thereafter. After the following call chain: saa7134go7007init |- go7007bootencoder |-...
CVE-2024-27074 media: go7007: fix a memleak in go7007_load_encoder
In the Linux kernel, the following vulnerability has been resolved: media: go7007: fix a memleak in go7007loadencoder In go7007loadencoder, bouncei.e. go-bootfw, is allocated without a deallocation thereafter. After the following call chain: saa7134go7007init |- go7007bootencoder |-...
CVE-2024-27074
The CVE-2024-27074 entry concerns a Linux kernel memory leak in the media go7007 path. Specifically, in go7007_load_encoder the bounce object (go->boot_fw) is allocated but not deallocated, and is freed later via kfree(go) after the call chain saa7134_go7007_init -> go7007_boot_encoder ->...
AZL-67478 CVE-2024-26938 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: Tolerate devdata==NULL in intelbiosencodersupportsdpdualmode If we have no VBT, or the VBT didn't declare the encoder in question, we won't have the 'devdata' for the encoder. Instead of oopsing just bail early. We...
DEBIAN-CVE-2024-26938
In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: Tolerate devdata==NULL in intelbiosencodersupportsdpdualmode If we have no VBT, or the VBT didn't declare the encoder in question, we won't have the 'devdata' for the encoder. Instead of oopsing just bail early. We...
CVE-2024-26938 drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode()
In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: Tolerate devdata==NULL in intelbiosencodersupportsdpdualmode If we have no VBT, or the VBT didn't declare the encoder in question, we won't have the 'devdata' for the encoder. Instead of oopsing just bail early. We...
CVE-2024-26938
CVE-2024-26938 is a Linux kernel vulnerability in the drm/i915/bios path. The issue occurs when intel_bios_encoder_supports_dp_dual_mode() encounters a NULL devdata for a DP encoder (e.g., if there is no VBT or the VBT does not declare the encoder). The kernel previously could oops or mis-handle...
Adobe Media Encoder Buffer Overflow
The vulnerability of the Adobe Media Encoder application relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...
imagemagick:encoder_jxl_fuzzer: Use-of-uninitialized-value in jxl::RenderPipeline::InputReady
Detailed Report: https://oss-fuzz.com/testcase?key=6261165370966016 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderjxlfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: jxl::RenderPipeline::InputReady...
libheif Heap Buffer Overflow DoS
The vulnerability of the JpegEncoder::Encode function in file format decoders and encoders of the libheif library is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause service interruptions...
Base64 Encoder/Decoder <= 0.9.2 - Stored XSS via CSRF
Description The plugin does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack PoC Make a logged in admin open an HTML file containing the following:...