Intel Renesas Electronics® USB 3.0 Driver Discontinuation - Lenovo Support US

Lenovo Security Advisory: LEN-30522 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0560 Summary Description: Intel has issued a Product Discontinuation notice for Intel® Renesas Electronics® USB 3.0 Driver due to a potential securit...

qt:setMarkdown: Heap-buffer-overflow in md_process_table_row

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5685425572413440 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: setMarkdown Job Type: libfuzzerasanqt Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6020000006b0 Crash State:...

jbig2dec:jbig2_fuzzer: Use-of-uninitialized-value in jbig2_arith_decode

Project: git://git.ghostscript.com/jbig2dec.git Detailed Report: https://oss-fuzz.com/testcase?key=5658335175245824 Project: jbig2dec Fuzzing Engine: libFuzzer Fuzz Target: jbig2fuzzer Job Type: libfuzzermsanjbig2dec Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

libhevc:hevc_dec_fuzzer: Use-of-uninitialized-value in ihevc_recon_32x32

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5104792921964544 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzermsanlibhevc Platform Id: linux Crash Type: Use-of-uninitialized-value...

htslib:hts_open_fuzzer: Crash in hpeek

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5711296702185472 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerubsanhtslib Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000010000 Crash...

imagemagick:encoder_dxt1_fuzzer: Use-of-uninitialized-value in PerceptibleReciprocal

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5070329724796928 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdxt1fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

imagemagick:encoder_palm_fuzzer: Use-of-uninitialized-value in IsFuzzyEquivalencePixelInfo

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6264774524665856 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpalmfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

imagemagick:encoder_plasma_fuzzer: Use-of-uninitialized-value in RoundToUnity

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5734463269240832 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderplasmafuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

hostap:x509: Heap-buffer-overflow in asn1_get_next

Project: git://w1.fi/srv/git/hostap.git Detailed Report: https://oss-fuzz.com/testcase?key=5629679052783616 Project: hostap Fuzzing Engine: libFuzzer Fuzz Target: x509 Job Type: libfuzzerasani386hostap Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf2b03ddd Crash Stat...

wasmtime:differential: Crash in [stack]

Project: https://github.com/bytecodealliance/wasmtime.git Detailed Report: https://oss-fuzz.com/testcase?key=5719544398348288 Project: wasmtime Fuzzing Engine: libFuzzer Fuzz Target: differential Job Type: libfuzzerasanwasmtime Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

Intel Processors Side Channel Data Leakage Vulnerabilities - Lenovo Support US

Lenovo Security Advisory: LEN-30044 Potential Impact: Information Disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0548, CVE-2020-0549, CVE-2020-0550 Summary Description: Intel reported potential security vulnerabilities in some Intel Processors that may allow...

Intel Processors Side Channel Data Leakage Vulnerabilities - Lenovo Support US

No description provided...

unbound:fuzz_1_fuzzer: Heap-buffer-overflow in dname_pkt_compare

Project: https://github.com/NLnetLabs/unbound.git Detailed Report: https://oss-fuzz.com/testcase?key=6316796672212992 Project: unbound Fuzzing Engine: libFuzzer Fuzz Target: fuzz1fuzzer Job Type: libfuzzerasanunbound Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

CVE-2019-6146

It has been reported that cross-site scripting XSS is possible in Forcepoint Web Security, version 8.x, via host header injection. CVSSv3.0: 5.3 Medium /AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N...

php:php-fuzz-mbstring: Use-of-uninitialized-value in node_min_byte_len

Detailed Report: https://oss-fuzz.com/testcase?key=4822305188610048 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-mbstring Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: nodeminbytelen nodeminbytelen optimizenodes...

imagemagick:encoder_label_fuzzer: Use-of-uninitialized-value in ScaleQuantumToChar

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5161551770419200 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderlabelfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

poppler:pdf_fuzzer: Use-of-uninitialized-value in BaseCryptStream::BaseCryptStream

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5735911623229440 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

skia:skottie_json: Use-of-uninitialized-value in skottie::RRectAdapter::setRadius

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5645275582693376 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: skottiejson Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

skia:skottie_json: Use-of-uninitialized-value in sksg::GradientColorFilter::setWeight

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5657388480987136 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: skottiejson Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

samba:fuzz_nmblib_parse_packet: Heap-buffer-overflow in handle_name_ptrs

Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=5638318155104256 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzznmblibparsepacket Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...