xerces-c:parse_target: Use-of-uninitialized-value in xercesc_3_2::XMLString::compareNString

Detailed Report: https://oss-fuzz.com/testcase?key=5643481133613056 Project: xerces-c Fuzzing Engine: libFuzzer Fuzz Target: parsetarget Job Type: libfuzzermsanxerces-c Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: xercesc32::XMLString::compareNString...

icu:collator_rulebased_fuzzer: Use-of-uninitialized-value in isMatchAtCPBoundary

Project: https://github.com/unicode-org/icu.git Detailed Report: https://oss-fuzz.com/testcase?key=5638982021152768 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: collatorrulebasedfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

ots:ots-fuzzer: Heap-buffer-overflow in LZ4_read16

Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=6229453185482752 Project: ots Fuzzing Engine: libFuzzer Fuzz Target: ots-fuzzer Job Type: libfuzzerasanots Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6180000007ce...

njs:njs_process_script_fuzzer: Use-of-uninitialized-value in njs_string_prototype_split

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5712452738351104 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_WMALOSSLESS_fuzzer: Index-out-of-bounds in revert_acfilter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5762574335606784 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDWMALOSSLESSfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_AGM_fuzzer: Crash in copy_block8

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5644115983466496 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAGMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x628ffffff640...

Symantec Messaging Gateway Multiple Issues

SUMMARY Symantec has released an update to address issues that were discovered in the Symantec Messaging Gateway SMG product. AFFECTED PRODUCTS Symantec Messaging Gateway SMG --- CVE | Affected Versions | Remediation CVE-2019-18377 CVE-2019-18378 CVE-2019-18379 | Prior to 10.7.3 | Upgrade to 10.7...

Intel Chipset Device Software INF Utility Advisory - Lenovo Support US

Lenovo Security Advisory: LEN-29926 Potential Impact: Denial of Service Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-14596 Summary Description: Intel reported a potential security vulnerability in Intel Chipset Device Software INF Utility which may allow denial of...

Intel Chipset Device Software INF Utility Advisory - Lenovo Support US

No description provided...

Intel Dynamic Platform and Thermal Framework Advisory - Lenovo Support US

Lenovo Security Advisory: LEN-29841 Potential Impact: Escalation of Privilege Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0134 Summary Description: Intel reported a potential security vulnerability in Intel Dynamic Platform and Thermal Framework which may allow...

Intel Rapid Storage Technology (RST) Advisory - Lenovo Support US

Lenovo Security Advisory: LEN-29840 Potential Impact: Escalation of Privilege Scope of Impact: Industry-wide Severity: Medium CVE Identifier: CVE-2019-14568 Summary Description: Intel reported a potential security vulnerability in the Intel Rapid Storage Technology RST which may allow escalation ...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in coolkey_get_attribute_bytes

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5655953538285568 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

matio:matio_fuzzer: Crash in H5O_sdspace_shared_decode

Detailed Report: https://oss-fuzz.com/testcase?key=5675535468593152 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6140000126c8 Crash State: H5Osdspaceshareddecode H5Oattrshareddecode H5Omsgiteraterea...

Microsoft Excel 2016 1901 - XML External Entity Injection

Microsoft Excel 2016 1901 - XML External Entity Injection Exploit Title: Microsoft Excel 2016 1901 - XML External Entity Injection Discovery by: hyp3rlinx Date: 2019-12-02 Vendor Homepage: www.microsoft.com Tested Version: 2016 v1901 CVE: N/A + Credits: John Page aka hyp3rlinx + Website:...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in coolkey_get_attribute_bytes_alloc

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5704639777603584 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

zstd:dictionary_loader: Use-of-uninitialized-value in ZSTD_loadCEntropy

Project: https://github.com/facebook/zstd.git Detailed Report: https://oss-fuzz.com/testcase?key=5685433724043264 Project: zstd Fuzzing Engine: libFuzzer Fuzz Target: dictionaryloader Job Type: libfuzzermsanzstd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_V210_fuzzer: Crash in ff_v210_planar_unpack_aligned_avx2

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5637264407527424 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDV210fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x628000030000...

kimageformats:kimgio_xcf_fuzzer: Use-of-uninitialized-value in BLEND_SOURCE_OVER_ARGB32_WITH_CONST_ALPHA_AVX2

Detailed Report: https://oss-fuzz.com/testcase?key=5666881846902784 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioxcffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

Skype v8.x - History Export v7 Web Vulnerability

Document Title: =============== Skype v8.x - History Export v7 Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2187 Vulnerability Magazine: https://www.vulnerability-db.com/?q=articles/2019/08/11/skype MSRC: VULN-007910 Release Date:...

Skype v8.x - History Export v7 Web Vulnerability

Document Title: =============== Skype v8.x - History Export v7 Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2187 Vulnerability Magazine: https://www.vulnerability-db.com/?q=articles/2019/08/11/skype MSRC: VULN-007910 Release Date:...