SMI Handler Vulnerability in legacy IBM System x and IBM BladeCenter systems - US

Lenovo Security Advisory: LEN-25165 Potential Impact: Denial of service Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6155 Summary Description: During an internal security review, a potential vulnerability was found in an SMI handler in certain legacy IBM System x and...

SMI Handler Vulnerability in legacy IBM System x and IBM BladeCenter systems - Lenovo Support US

No description provided...

karchive/karchive_fuzzer: Use-of-uninitialized-value in QByteArray::QByteArray

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5657295809150976 Project: karchive Fuzzer: libFuzzerkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

imagemagick/ping_jpg_fuzzer: Use-of-uninitialized-value in ParseInternalDoctype

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5673441966948352 Project: imagemagick Fuzzer: libFuzzerimagemagickpingjpgfuzzer Fuzz target binary: pingjpgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

libxslt/xslt: Index-out-of-bounds in xsltSetAttrVTsegment

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed report: https://oss-fuzz.com/testcase?key=5954139823013888 Project: libxslt Fuzzer: libFuzzerlibxsltxslt Fuzz target binary: xslt Job Type: libfuzzerubsanlibxslt Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

capstone/fuzz_disasmnext: Index-out-of-bounds in printVectorIndex

Detailed report: https://oss-fuzz.com/testcase?key=4786506255826944 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzerubsancapstone Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: printVectorIndex csdisas...

ffmpeg/ffmpeg_AV_CODEC_ID_AGM_fuzzer: Heap-buffer-overflow in decode_inter_plane

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5704904095563776 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDAGMfuzzer Fuzz target binary: ffmpegAVCODECIDAGMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow...

systemd/fuzz-netdev-parser: Use-of-uninitialized-value in explicit_bzero_safe

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5189307683307520 Project: systemd Fuzzer: libFuzzersystemdfuzz-netdev-parser Fuzz target binary: fuzz-netdev-parser Job Type: libfuzzermsansystemd Platform Id: linux Crash Type:...

Cisco Finally Patches Router Bugs As New Unpatched Flaws Surface

After a botched first attempt at patching two high-severity bugs affecting its RV320 and RV325 routers, Cisco Systems is out with fresh new fixes for both devices. However, Cisco isn’t out of the woods yet. On Thursday, it also reported two new medium-severity router bugs impacting the same route...

kimageformats/kimgio_fuzzer: Use-of-uninitialized-value in parseExtraField

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5703537020895232 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...

php/php-fuzz-exif: Heap-buffer-overflow in exif_iif_add_value

Detailed report: https://oss-fuzz.com/testcase?key=5724097968865280 Project: php Fuzzer: aflphpphp-fuzz-exif Fuzz target binary: php-fuzz-exif Job Type: aflasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60400002cbba Crash State: exifiifaddvalue exifiifaddtag...

radare2/ia_fuzz: Crash in r_uleb128

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5651766995058688 Project: radare2 Fuzzer: aflradare2iafuzz Fuzz target binary: iafuzz Job Type: aflasanradare2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61f10005167f Crash State:...

imagemagick/encoder_mvg_fuzzer: Use-of-uninitialized-value in sixel_decode

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5685521475436544 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

systemd/fuzz-network-parser: Use-of-uninitialized-value in condition_test

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5652461068484608 Project: systemd Fuzzer: libFuzzersystemdfuzz-network-parser Fuzz target binary: fuzz-network-parser Job Type: libfuzzermsansystemd Platform Id: linux Crash Type:...

imagemagick/encoder_psd_fuzzer: Use-of-uninitialized-value in CorrectPSDAlphaBlend

Detailed report: https://oss-fuzz.com/testcase?key=5668860357771264 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpsdfuzzer Fuzz target binary: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in fz_mask_color_key

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5741749579808768 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

capstone/fuzz_disasmnext: Use-of-uninitialized-value in ARM_post_printer

Detailed report: https://oss-fuzz.com/testcase?key=5650842838892544 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ARMpostprinter...

sqlite3/ossfuzz: Use-of-uninitialized-value in accessPayload

Detailed report: https://oss-fuzz.com/testcase?key=5649176925306880 Project: sqlite3 Fuzzer: libFuzzersqlite3ossfuzz Fuzz target binary: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: accessPayload vdbeMemFromBtreeResiz...

skia/image_filter_deserialize: Heap-buffer-overflow in SkMatrix* SkRecorder::copy<SkMatrix>

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5194344992079872 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow...

libheif/file-fuzzer: Stack-buffer-overflow in void apply_sao_internal<unsigned short>

Project: https://github.com/strukturag/libheif.git Detailed report: https://oss-fuzz.com/testcase?key=5724458239655936 Project: libheif Fuzzer: libFuzzerlibheiffile-fuzzer Fuzz target binary: file-fuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Stack-buffer-overflow READ 4...