CVE-2026-9354

A vulnerability was detected in NousResearch hermes-agent up to 2026.4.16. The affected element is an unknown function of the component Slack Agent/Mattermost Agent. The manipulation of the argument formatmessage results in escaping of output. The attack can be executed remotely. The exploit is n...

CVE-2026-9354 NousResearch hermes-agent Slack Agent/Mattermost Agent escape output

A vulnerability was detected in NousResearch hermes-agent up to 2026.4.16. The affected element is an unknown function of the component Slack Agent/Mattermost Agent. The manipulation of the argument formatmessage results in escaping of output. The attack can be executed remotely. The exploit is n...

EUVD-2026-31566

A vulnerability was detected in NousResearch hermes-agent up to 2026.4.16. The affected element is an unknown function of the component Slack Agent/Mattermost Agent. The manipulation of the argument formatmessage results in escaping of output. The attack can be executed remotely. The exploit is n...

CVE-2026-9354

CVE-2026-9354 concerns NousResearch hermes-agent (up to version 2026.4.16) affecting the Slack Agent/Mattermost Agent component. The vulnerability targets an unknown function where manipulating the argument format_message results in output escaping. The issue is exploitable remotely and, per the ...

CVE-2026-9354: Improper Encoding or Escaping of Output

A vulnerability was detected in NousResearch hermes-agent up to 2026.4.16. The affected element is an unknown function of the component Slack Agent/Mattermost Agent. The manipulation of the argument formatmessage results in escaping of output. The attack can be executed remotely. The exploit is n...

libultrahdr:ultrahdr_enc_fuzzer: Use-of-uninitialized-value in format_message

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=6027046000590848 Project: libultrahdr Fuzzing Engine: libFuzzer Fuzz Target: ultrahdrencfuzzer Job Type: libfuzzermsanlibultrahdr Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libultrahdr:ultrahdr_dec_fuzzer: Use-of-uninitialized-value in format_message

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=5279522344206336 Project: libultrahdr Fuzzing Engine: libFuzzer Fuzz Target: ultrahdrdecfuzzer Job Type: libfuzzermsanlibultrahdr Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

OSV-2024-1158 Use-of-uninitialized-value in format_message

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=370032374 Crash type: Use-of-uninitialized-value Crash state: formatmessage ultrahdr::JpegDecoderHelper::decode ultrahdr::JpegDecoderHelper::decompressImage...

libultrahdr:ultrahdr_dec_fuzzer: Use-of-uninitialized-value in format_message

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=5389078369992704 Project: libultrahdr Fuzzing Engine: libFuzzer Fuzz Target: ultrahdrdecfuzzer Job Type: libfuzzermsanlibultrahdr Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libultrahdr:ultrahdr_dec_fuzzer: Use-of-uninitialized-value in format_message

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=5926544905142272 Project: libultrahdr Fuzzing Engine: libFuzzer Fuzz Target: ultrahdrdecfuzzer Job Type: libfuzzermsanlibultrahdr Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

skia-ftz:image_decode_incremental: Use-of-uninitialized-value in format_message

Detailed Report: https://oss-fuzz.com/testcase?key=5517438365007872 Project: skia-ftz Fuzzing Engine: libFuzzer Fuzz Target: imagedecodeincremental Job Type: libfuzzermsanskia-ftz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: formatmessage...

mupdf:pdf_fuzzer: Use-of-uninitialized-value in format_message

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5814064644161536 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

mupdf:pdf_fuzzer: Use-of-uninitialized-value in format_message

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5150032104849408 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...